113 matches found
rbuster
Rbuster yet another dirbuster Common Command line options -a - specify a user agent string to send in the request -c - use this to specify any cookies that you might need simulating auth. header. -f - force processing of a domain with wildcard results. -l - show the length of the response. -r...
oathkeeper
Чат · Обсуждения · Новостная рассылка · Документация · Попробуйте Ory Network · Вакансии Ory Oathkeeper — это прокси для идентификации и доступа Identity & Access Proxy, IAP и API для принятия решений по контролю доступа, который авторизует HTTP-запросы на основе наборов правил доступа. Он следуе...
CVE-2026-48005
A flaw was found in the modauthdigest module of the Apache HTTP Server. When Digest authentication is configured with nonce-count checking enabled, missing authentication checks allow an unauthenticated remote attacker to submit forged HTTP Authorization headers. This flaw can lead to a Denial of...
CVE-2025-31161
CVE-2025-31161 CrushFTP Authentication Bypass Scanner A Python tool to detect and test for CVE-2025-31161 vulnerability in CrushFTP servers. 📖 Description This script tests for the authentication bypass vulnerability CVE-2025-31161 in CrushFTP servers that allows remote attackers to authenticate...
CVE-2026-100554
OpenClaw npm package 'openclaw' versions = 2026.5.12 and 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. Node revocation invalidates the WebSocket client, but Canvas HTTP authorization continues to accept and renew the previously granted capability...
CVE-2026-100554 OpenClaw before 2026.8.1 Canvas Capability Revocation Bypass
OpenClaw npm package 'openclaw' versions = 2026.5.12 and 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. Node revocation invalidates the WebSocket client, but Canvas HTTP authorization continues to accept and renew the previously granted capability...
EUVD-2026-87496
OpenClaw npm package 'openclaw' versions = 2026.5.12 and 2026.8.1 do not immediately invalidate Canvas HTTP authorization when a paired node is revoked. Node revocation invalidates the WebSocket client, but Canvas HTTP authorization continues to accept and renew the previously granted capability...
PT-2026-99191
Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.5.12 through 2026.8.0 Description When a paired node is revoked, the system fails to immediately invalidate Canvas HTTP authorization. While the WebSocket client is invalidated, the Canvas HTTP authorization continues to...
CVE-2026-71862: Exposure of Sensitive Information to an Unauthorized Actor
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations. From 3.3.0 until 3.9.2, enabling the global showURL setting causes the unauthenticated GET /api/v1/status-page/:url endpoi...
CVE-2026-49197: Improper Authentication
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails...
CVE-2010-0101
The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service operating system halt via a malformed HTTP Authorization header...
CVE-2020-12624
The League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization header to an arbitrary web site that hosts an external image because an OkHttp object is reused, which allows remote attackers to hijack sessions...
EUVD-2013-3030
Malware in sbrugna...
EUVD-2020-4925
Malware in sbrugna...
EUVD-2002-0561
Malware in sbrugna...
EUVD-2018-0131
Malware in sbrugna...
EUVD-2024-3215
Malicious code in bioql PyPI...
EUVD-2022-5343
Malicious code in bioql PyPI...
