919 matches found
JFrog Artifactory Access Blank Join Key Authentication Bypass
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. id: CVE-2026-82329 info: name: JFrog Artifactory Access Blank Join Key Authentication Bypass author: johnk3r,pruv...
Horde Groupware Unauthenticated Admin Access
Horde Groupware contains an administrative account with a blank password, which allows remote attackers to gain access. id: CVE-2005-3344 info: name: Horde Groupware Unauthenticated Admin Access author: pikpikcu severity: critical description: Horde Groupware contains an administrative account wi...
CVE-2024-23733
CVE-2024-23733 Software AG webMethods API Integration Server 10.15.0 Control de Acceso Incorrecto Descripción La página de inicio de sesión /WmAdmin/,/invoke/vm.server/login en el Integration Server de Software AG webMethods 10.15.0 anterior a CoreFix7 permite a atacantes remotos acceder al panel...
CVE-2026-103510
P4 Search versions prior to 2026.4.2 are vulnerable to an authentication bypass because the service does not fail securely when presented with a blank authentication token . An unauthenticated attacker with network access can exploit this flaw to obtain highest application privileges , potentiall...
CVE-2026-103510 Authentication bypass via blank auth token in P4Search
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...
CVE-2026-82329-JFrog-Artifactory-
CVE-2026-82329-JFrog-Artifactory- CVE-2026-82329 — JFrog Artifactory Auth Bypass The Vulnerability Critical authentication bypass in JFrog Artifactory versions 7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.37, 7.161.19. The flaw allows an unauthenticated attacker to forge a JWT using a blank HMAC...
CVE-2026-82329-JFrog-Artifactory-Auth-Bypass
artifactory.py ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 unauth admin takeover ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory self-hosted unauthenticated...
cve-2026-82329-jfrog-artifactory
CVE-2026-82329 — JFrog Artifactory 인증 우회 → 관리자 탈취 CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-287 · 2026-08-28 공개 · 실제 공격에서 악용됨. 인증되지 않은 네트워크 인접 공격자가 기본 자체 호스팅 JFrog Artifactory에 대해 플랫폼 관리자 액세스 토큰 을 발급합니다. 이 디렉터리에는 재현 가능한 Docker 랩과 URL 매개변수화된 검증 PoC가 포함되어 있습니다. artifactory-oss 7.161.19취약,...
blankspace
Blank Space Blank Space is a refactoring of James Forshaw's original proof of concept for CVE-2021-43893, EFSRPC arbitrary file upload privilege escalation. Blank Space can create arbitrary files on a remote host that is using unconstrained delegation if it isn't patched for CVE-2021-43893. File...
AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2023:1701444455)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2023:1701444455 advisory. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that star...
EUVD-2026-82425
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound. This is fixed in...
GHSA-4RF6-QX84-Q9FV Fulgur: Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.26.0, a childless box that resolves to a pathologically tall height was amplified into thousands of blank PDF pages, even when it produces no visible output. The...
Astra Linux – Vulnerability in Rails
Action View provides conventions and helpers for building web pages using the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when a blank string was used as an HTML attribute name in Action View tag helpers, attribute escaping was bypassed, resulting in malformed HTML. A...
Astra Linux – Vulnerability in Python 3.7, Python 2.7
A issue in the urllib.parse component of Python prior to version 3.11.4 allows attackers to bypass blocklisting methods by providing a URL that starts with blank characters...
Astra Linux – Vulnerability in Firefox
When a network error occurred during page loading, the previous content could remain visible, accompanied by a blank URL bar. This could be used to disguise a spoofed website. This vulnerability affects Firefox versions earlier than 126...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2026-090128)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090128 advisory. Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to...
CVE-2026-86486
In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank...
CVE-2026-86486
In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank...
