citrix-honeypot

Citrix ADC NetScaler 허니팟 CVE-2019-19781 Shitrix / Citrixmash 페이로드 탐지 및 로깅 실패한 로그인 시도 기록 검색 엔진예: google, shodan 등에서 인덱싱될 가능성을 높이기 위해 실제 장비에서 가져온 콘텐츠와 헤더 제공 설치 사전 컴파일됨 사전 컴파일된 Linux x64 패키지는 여기에서 확인할 수 있습니다. mkdir citrix-honeypot cd citrix-honeypot wget...

CVE-2021-27188

CVE-2021-27188 제안된 설명 FX Aggregator 터미널 클라이언트 Sovremennye Delovye Tekhnologii 제품는 공격자가 피해자 계정에 대해 5회의 잘못된 로그인 시도를 통해 서비스 거부5시간 동안 접속 중단를 유발할 수 있습니다. 취약점 유형 기타 DoS 제품 공급업체 OOO Sovremennye Delovye Tekhnologii 영향을 받는 제품 코드 베이스 Fx-agreggator terminal client - 1 영향을 받는 구성 요소 영향을 받는 실행 파일 공격 유형 원격 서비스 ...

BIT-JUPYTERHUB-2026-54338 JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

CVE-2026-66418-OpenClaw-Dashboard-v3.0.0-Stored-XSS-via-Failed-Login-Username-Field

보안 권고: 무인증 저장형 크로스 사이트 스크립팅으로 인한 관리자 계정 탈취 openclaw-dashboard 제목: OpenClaw Dashboard v3.0.0 실패한 로그인 사용자 이름 필드를 통한 저장형 XSS 할당된 CVE ID: CVE-2026-66418 대상 저장소: https://github.com/tugcantopaloglu/openclaw-dashboard 요약 로그인 엔드포인트는 제출된 사용자 이름을 검증 없이 감사 로그에 기록합니다. 알림 패널은 이후 해당 로그 항목을 읽어 innerHTML로 이스케이프 ...

SUSE CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

DEBIAN-CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

UBUNTU-CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

The django-allauth library, in versions before 65.19.4 , contains a vulnerability where failed login attempt limits are not properly enforced. In certain common configurations, an attacker can exploit the way the system handles diacritics (such as accents) to bypass these limits, allowing for a h...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

CVE-2026-97764

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

EUVD-2026-86517

django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the handling of diacritics e.g., accents for a higher effective limit...

Linux Distros Unpatched Vulnerability : CVE-2026-97764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the...

CVE-2026-92082

By default, Payara Server does not limit the number of failed login attempts, which can leave it vulnerable to brute force login attacks. To mitigate this, Payara Server includes built-in automatic attack protection. For configuration details, see ...

CVE-2026-92082

Payara Server is vulnerable to brute-force login attacks because, by default, it does not limit the number of failed login attempts. The attack vector is adjacent network (AV:A) with low complexity and no privileges required, rated CVSS 4.0 6.3 (MEDIUM) with low confidential impact on the vulnera...

CVE-2026-81754

The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible...

EUVD-2026-75935

The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible...

PYSEC-2026-3853 JupyterHub has Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login

Impact Invalid input to login resulted in unbounded logging output. Only form-based Authenticators the default PAM Authenticator, but not the more widely used OAuthenticator are affected. Patches Upgrade to 5.5.0. Workarounds Use an Authenticator that doesn't use a login form, such as...

CVE-2026-54338

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

DEBIAN-CVE-2026-54338

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...

CVE-2026-54338

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login authenticators can place an unbounded attacker-controlled username in failed-login logs, allowing an unauthenticated attacker to consume logging and...