919 matches found
JFrog Artifactory Access Blank Join Key Authentication Bypass
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. id: CVE-2026-82329 info: name: JFrog Artifactory Access Blank Join Key Authentication Bypass author: johnk3r,pruv...
Horde Groupware Unauthenticated Admin Access
Horde Groupware contains an administrative account with a blank password, which allows remote attackers to gain access. id: CVE-2005-3344 info: name: Horde Groupware Unauthenticated Admin Access author: pikpikcu severity: critical description: Horde Groupware contains an administrative account wi...
CVE-2024-23733
CVE-2024-23733 Software AG webMethods API Integration Server 10.15.0 Control de Acceso Incorrecto Descripción La página de inicio de sesión /WmAdmin/,/invoke/vm.server/login en el Integration Server de Software AG webMethods 10.15.0 anterior a CoreFix7 permite a atacantes remotos acceder al panel...
CVE-2026-103510
P4 Search versions prior to 2026.4.2 are vulnerable to an authentication bypass because the service does not fail securely when presented with a blank authentication token . An unauthenticated attacker with network access can exploit this flaw to obtain highest application privileges , potentiall...
CVE-2026-103510 Authentication bypass via blank auth token in P4Search
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server...
CVE-2026-82329-JFrog-Artifactory-
CVE-2026-82329-JFrog-Artifactory- CVE-2026-82329 — Bypass de Autenticación en JFrog Artifactory La Vulnerabilidad Bypass de autenticación crítico en JFrog Artifactory versiones 7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.37, 7.161.19. La falla permite a un atacante no autenticado falsificar un...
CVE-2026-82329-JFrog-Artifactory-Auth-Bypass
artifactory.py ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 unauth admin takeover ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory self-hosted unauthenticated...
cve-2026-82329-jfrog-artifactory
CVE-2026-82329 — Bypass de autenticación no autenticado en JFrog Artifactory → toma de control de administrador CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-287 · divulgado el 2026-08-28 · explotado activamente. Un atacante no autenticado y adyacente a la red genera un token de acceso de...
blankspace
Blank Space Blank Space es una refactorización del prueba de concepto original de James Forshaw para CVE-2021-43893, escalada de privilegios mediante carga arbitraria de archivos en EFSRPC. Blank Space puede crear archivos arbitrarios en un host remoto que esté utilizando delegación sin...
AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2023:1701444455)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2023:1701444455 advisory. - An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that star...
EUVD-2026-82425
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound. This is fixed in...
GHSA-4RF6-QX84-Q9FV Fulgur: Non-painting replaced elements amplify to thousands of blank PDF pages (denial of service)
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.26.0, a childless box that resolves to a pathologically tall height was amplified into thousands of blank PDF pages, even when it produces no visible output. The...
Astra Linux – Vulnerability in Rails
Action View provides conventions and helpers for building web pages using the Rails framework. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when a blank string was used as an HTML attribute name in Action View tag helpers, attribute escaping was bypassed, resulting in malformed HTML. A...
Astra Linux – Vulnerability in Python 3.7, Python 2.7
A issue in the urllib.parse component of Python prior to version 3.11.4 allows attackers to bypass blocklisting methods by providing a URL that starts with blank characters...
Astra Linux – Vulnerability in Firefox
When a network error occurred during page loading, the previous content could remain visible, accompanied by a blank URL bar. This could be used to disguise a spoofed website. This vulnerability affects Firefox versions earlier than 126...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2026-090128)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090128 advisory. Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to...
CVE-2026-86486
In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank...
CVE-2026-86486
In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank...
