Lucene search
+L

75369 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/12 12:00 a.m.•6 views

EulerOS 2.0 SP11 : python-pyasn1 (EulerOS-SA-2026-4279)

According to the versions of the python-pyasn1 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Pyth...

7.5CVSS7.3AI score0.00616EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/11 5:40 p.m.•37 views

haiti

HAITI HA sh I denT ifI er ¿Qué es? Una herramienta CLI y librería para identificar tipos de hash identificador de tipo de hash. CLI librería Características Más de 675 tipos de hash detectados Algoritmos modernos compatibles SHA3, Keccak, Blake2, etc. Referencias de Hashcat y John the Ripper...

6.3AI score
SaveExploits0References7
osv_debian
osv_debian
•added 2026/10/11 1:17 p.m.•20 views

DEBIAN-CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

2.3CVSS5.8AI score0.00245EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/11 1:17 p.m.•14 views

CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

4.2CVSS0.00245EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu
•added 2026/10/11 1:17 p.m.•17 views

UBUNTU-CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

4.2CVSS5.8AI score0.00245EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/10/11 1:17 p.m.•10 views

CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

4.2CVSS5.8AI score0.00245EPSS
SaveExploits0References7
Mend
Mend
•added 2026/10/11 12:19 p.m.•10 views

CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

4.2CVSS5.8AI score0.00245EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/11 12:19 p.m.•10 views

EUVD-2026-96917

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

4.2CVSS5.8AI score0.00245EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/11 12:19 p.m.•19 views

CVE-2026-108752

JupyterHub versions through 6.0.1 are vulnerable to an identifier collision vulnerability caused by the use of unescaped hyphens in usernames. This flaw allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username (e.g., a user with the nam...

4.2CVSS5.8AI score0.00245EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2026/10/11 12:19 p.m.•11 views

CVE-2026-108752

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

4.2CVSS5.8AI score0.00245EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/10/11 12:19 p.m.•17 views

CVE-2026-108752 JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

2.3CVSS5.9AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/11 12:19 p.m.•45 views

CVE-2026-108752 JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

4.2CVSS0.00245EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/11 12:19 p.m.•44 views

CVE-2026-108721 Open Computer Use through 1.0.0 Denylist Bypass via Case-Variant Bundle ID

Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-manager denylist using case-variant bundle identifiers. Attackers, including prompt-injected model turns, can pass identifiers like...

5.8CVSS0.00132EPSS
SaveExploits0References5
NVD
NVD
•added 2026/10/11 7:17 a.m.•16 views

CVE-2026-104681

The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to create and edit a gallery Author and above by default to disclose the title and excerpt of other...

2.7CVSS0.0023EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/11 6:00 a.m.•9 views

EUVD-2026-96740

The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to create and edit a gallery Author and above by default to disclose the title and excerpt of other...

2.7CVSS5.8AI score0.0023EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/11 2:31 a.m.•16 views

hash-identifier

hash-identifier Software para identificar los diferentes tipos de hashes utilizados para cifrar datos y especialmente contraseñas. Formatos de cifrado soportados: ADLER-32 CRC-32 CRC-32B CRC-16 CRC-16-CCITT DESUnix FCS-16 GHash-32-3 GHash-32-5 GOST R 34.11-94 Haval-160 Haval-192 110080 ,Haval-224...

6.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/11 12:00 a.m.•7 views

CVE-2026-108752: Use of Multiple Resources with Duplicate Identifier

JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphenated username. Attackers holding a name like alice-prod can overwrite the client for alice's server prod, breaking...

4.2CVSS5.8AI score0.00245EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/11 12:00 a.m.•15 views

PT-2026-110154

Name of the Vulnerable Software and Affected Versions JupyterHub versions prior to 6.0.2 Description An identifier collision occurs when authenticated users register a hyphenated username. This allows an attacker to overwrite another user's named-server OAuth client. For example, a user with a na...

4.2CVSS5.7AI score0.00245EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/11 12:00 a.m.•8 views

CVE-2026-104681: Exposure of Sensitive Information to an Unauthorized Actor

The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to create and edit a gallery Author and above by default to disclose the title and excerpt of other...

2.7CVSS5.8AI score0.0023EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/09 8:42 p.m.•31 views

EUVD-2026-51991

Vikunja: Link-share principal ID collision allows cross-account API token issuance and management...

8.6CVSS5.7AI score0.00464EPSS
SaveExploits0References6
Rows per page
Query Builder