Lucene search
+L

3 matches found

OSV
OSV
added 2023/08/29 5:23 p.m.24 views

CVE-2023-39522 Username enumeration attack in goauthentik

goauthentik is an open-source Identity Provider. In affected versions using a recovery flow with an identification stage an attacker is able to determine if a username exists. Only setups configured with a recovery flow are impacted by this. Anyone with a user account on a system with the recover...

5.3CVSS5.2AI score0.00514EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/03/04 12:30 a.m.10 views

CVE-2023-26481 Insufficient user check in FlowTokens by Email stage

authentik is an open-source Identity Provider. Due to an insufficient access check, a recovery flow link that is created by an admin or sent via email by an admin can be used to set the password for any arbitrary user. This attack is only possible if a recovery flow exists, which has both an...

9.1CVSS9.3AI score0.00275EPSS
SaveExploits0References2
Gitee
Gitee
added 2020/02/20 11:37 p.m.4 views

jailbreakme-unified

This is a web-based jailbreak solution that unifies existing jailbreak solutions and new ones. It is created by Sem Voigtländer and supports various iOS versions, including 8.4.1, 9.3 up to 9.3.3, 11.3.1, and 12.0 up to 12.0.1 64-bit, as well as 3.1.2 up to 4.0.1 and 8.4.1 and 9.1 up to 9.3.4...

6.8AI score
SaveExploits0
Rows per page
Query Builder