5 matches found
CVE-2026-79664
Ech0 before 4.7.3 fails to properly revoke access tokens created with never-expire option, allowing attackers to maintain perpetual authenticated access after token theft. Three independent revocation mechanisms fail: logout panics on nil ExpiresAt field, RevokeToken skips when remainTTL is zero,...
GHSA-WF66-MPHR-4C4R Apache Kafka exposes sensitive information in its DEBUG logs
Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses information in the DEBUG log level in the logs. By default, the log level is set to INFO level. If the DEBUG level is enabled, the sensitive information wi...
CVE-2026-33558
Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses information in the DEBUG log level in the logs. By default, the log level is set to INFO level. If the DEBUG level is enabled, the sensitive information wi...
Skype Account Service - Expire Token Bypass Vulnerability
Document Title: =============== Skype Account Service - Expire Token Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=762 Download: http://www.vulnerability-lab.com/resources/videos/762.wmv View: http://www.youtube.com/watch?v=lrNj785QQlg Advisory:...
Skype Account Service - Expire Token Bypass Vulnerability
Document Title: =============== Skype Account Service - Expire Token Bypass Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=762 Download: http://www.vulnerability-lab.com/resources/videos/762.wmv View: http://www.youtube.com/watch?v=lrNj785QQlg Advisory:...