1641 matches found
PT-2026-107681
Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions prior to 3.0.13 AsyncHttpClient versions prior to 2.16.1 Description The AsyncHttpClient library, used by Java applications for asynchronous HTTP requests and responses, contains an issue where Realm.Builder incorrectl...
CVE-2026-8181
CVE-2026-8181 Esta vulnerabilidad permite a atacantes no autenticados que conozcan un nombre de usuario de administrador válido hacerse pasar por ese administrador durante las solicitudes a la API REST mediante el uso de cualquier contraseña incorrecta en una cabecera de autenticación básica. Los...
Cisco ASA Credentials Management Errors (CVE-2019-1714)
A vulnerability in the implementation of Security Assertion Markup Language SAML 2.0 Single Sign-On SSO for Clientless SSL VPN WebVPN and AnyConnect Remote Access VPN in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated,...
CVE-2026-41940
CVE-2026-41940: Omisión de Autenticación en cPanel/WHM Objetivo Único y Múltiple Aviso legal: Este documento y el script asociado exploit.py se proporcionan estrictamente con fines educativos, investigación de seguridad y pruebas de penetración autorizadas. No utilice este software contra sistema...
CVE-2026-8181
CVE-2026-8181 Prueba de Concepto Investigación • Validación • Pruebas de Seguridad "las rosas son rojas, las violetas son azules, creo que me acabo de cagar en los pantalones pensando en ti. rizz" Resumen de CVE Campo| Valor ---|--- CVE ID| CVE-2026-8181 Tipo| Omisión de autenticación Impacto|...
CVE-2026-41940
CVE-2026-41940 - Bypass de autenticación de cPanel/WHM Este repositorio contiene un informe expurgado en inglés y una herramienta de verificación basada en Go para CVE-2026-41940, una omisión de autenticación de cPanel/WHM causada por inyección CRLF en el manejo de la autenticación básica. Todas...
EUVD-2026-90890
In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's Authorization header to outgoing requests without checking the destination origin. In deployments using authentication, an attacker could induce a us...
CVE-2026-101322: Insertion of Sensitive Information Into Sent Data
In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's Authorization header to outgoing requests without checking the destination origin. In deployments using authentication, an attacker could induce a us...
CVE-2026-74865
sogoyhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unauthenticated attacker who provides the username of an existing user and any arbitrary password can successfully log in to that user's accoun...
EUVD-2026-89797
sogoyhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unauthenticated attacker who provides the username of an existing user and any arbitrary password can successfully log in to that user's accoun...
CVE-2026-74865 Authentication Bypass in sogo_yhn
sogoyhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unauthenticated attacker who provides the username of an existing user and any arbitrary password can successfully log in to that user's accoun...
CVE-2026-74865
The sogo_yhn component contains an authentication bypass vulnerability caused by the configuration parameter SOGoTrustProxyAuthentication=YES. This configuration allows an unauthenticated attacker to bypass password requirements during HTTP Basic authentication by providing a valid username and a...
CVE-2026-74865 Authentication Bypass in sogo_yhn
sogoyhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unauthenticated attacker who provides the username of an existing user and any arbitrary password can successfully log in to that user's accoun...
CVE-2026-74865: Authorization Bypass Through User-Controlled Key
sogoyhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unauthenticated attacker who provides the username of an existing user and any arbitrary password can successfully log in to that user's accoun...
PT-2026-103128
sogo yhn configures SOGo with a parameter "SOGoTrustProxyAuthentication=YES". This causes the password to be bypassed during HTTP Basic authentication. An unauthenticated attacker who provides the username of an existing user and any arbitrary password can successfully log in to that user's...
Linux Distros Unpatched Vulnerability : CVE-2026-88837
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox httpd treats yescrypt $y$ password hashes as plaintext during Basic Authentication, inverting the authentication check. CVE-2026-88837 Note that Nessus...
SUSE CVE-2026-88837
BusyBox httpd treats yescrypt $y$ password hashes as plaintext during Basic Authentication, inverting the authentication check...
CVE-2026-88837
BusyBox httpd treats yescrypt $y$ password hashes as plaintext during Basic Authentication, inverting the authentication check...
