keycloak__keycloak_CVE-2022-4137_20-0-3

Keycloak O Keycloak é uma solução de Gerenciamento de Identidade e Acesso de Código Aberto para Aplicações e Serviços modernos. Este repositório contém o código-fonte do Keycloak Server, dos adaptadores Java e do adaptador JavaScript. Ajuda e Documentação Documentação Lista de E-mails de Usuários...

kratos

Chat · Diskussionen · Newsletter · Dokumentation · Ory Network testen · Jobs Ory Kratos ist ein API-zentriertes Identity- und Benutzerverwaltungssystem für Cloud-native Anwendungen. Es zentralisiert Anmelde-, Registrierungs-, Wiederherstellungs-, Verifizierungs- und Profilverwaltungsabläufe, soda...

CVE-2022-2414-POC

CVE-2022-2414-POC Der Zugriff auf externe Entitäten beim Parsen von XML-Dokumenten kann zu XML-External-Entity-Angriffen XXE führen. Dieser Fehler ermöglicht es einem entfernten Angreifer, potenziell den Inhalt beliebiger Dateien abzurufen, indem er speziell gestaltete HTTP-Anfragen sendet. Es...

GrafanaSCIMalform

Grafana SCIMalform CVE-2025-41115 Visão Geral Este repositório contém minha pesquisa sobre a vulnerabilidade CVE-2025-41115 no componente SCIM do Grafana Enterprise. Ele consiste em um ambiente de teste com a aplicação vulnerável e código de exploração. Referências Apenas algumas referências útei...

keycloak__keycloak_CVE-2022-1274_20-0-3

Keycloak Keycloak आधुनिक अनुप्रयोगों और सेवाओं के लिए एक ओपन सोर्स आइडेंटिटी और एक्सेस मैनेजमेंट समाधान है। इस रिपॉजिटरी में Keycloak सर्वर, जावा एडाप्टर और जावास्क्रिप्ट एडाप्टर का स्रोत कोड शामिल है। सहायता और दस्तावेज़ीकरण दस्तावेज़ीकरण यूज़र मेलिंग सूची - Keycloak के बारे में सहायता और सामान्...

keycloak__keycloak_CVE-2014-3656_1-0-5-Final

ओपन सोर्स पहचान और एक्सेस प्रबंधन न्यूनतम प्रयास के साथ अनुप्रयोगों में प्रमाणीकरण जोड़ें और सेवाओं को सुरक्षित करें। उपयोगकर्ताओं को संग्रहीत करने या उपयोगकर्ताओं को प्रमाणित करने की कोई आवश्यकता नहीं है। Keycloak उपयोगकर्ता फ़ेडरेशन, मजबूत प्रमाणीकरण, उपयोगकर्ता प्रबंधन, सूक्ष्म-स्तरीय प्राधिकर...

BloodHound

BloodHound è un'applicazione web monolitica composta da un frontend React integrato con Sigma.js e un backend API REST basato su Go. Viene distribuito con un database applicativo PostgreSQL e un database a grafo Neo4j, ed è alimentato dai raccoglitori di dati SharpHound e AzureHound. BloodHound...

cloudfoundry_uaa

CloudFoundry Benutzerkonto- und Authentifizierungsserver UAA Der UAA ist ein Multi-Tenant-Identity-Management-Dienst, der in Cloud Foundry verwendet wird, aber auch als eigenständiger OAuth2-Server verfügbar ist. Seine Hauptaufgabe ist als OAuth2-Anbieter, der Token für Client-Anwendungen...

keycloak__keycloak_CVE-2022-3782_20-0-1

Keycloak Keycloak è una soluzione Open Source di Identity and Access Management per applicazioni e servizi moderni. Questo repository contiene il codice sorgente per il server Keycloak, gli adattatori Java e l'adattatore JavaScript. Aiuto e documentazione Documentazione Mailing list utenti -...

zitadel

L'infrastruttura di identità per sviluppatori ZITAD...

freeipa

Server FreeIPA FreeIPA consente agli amministratori Linux di gestire centralmente gli aspetti di identità, autenticazione e controllo degli accessi dei sistemi Linux e UNIX, fornendo strumenti di gestione da riga di comando e basati sul web, semplici da installare e utilizzare. FreeIPA è costruit...

kanidm

Kanidm - Einfaches und sicheres Identitätsmanagement Über Kanidm ist eine einfache und sichere Plattform für das Identitätsmanagement, die es anderen Anwendungen und Diensten ermöglicht, die Herausforderung der Authentifizierung und Speicherung von Identitäten an Kanidm auszulagern. Das Ziel dies...

keycloak

Open-Source-Identitäts- und Zugriffsverwaltung Fügen Sie Anwendungen Authentifizierung hinzu und sichern Sie Dienste mit minimalem Aufwand. Sie müssen sich nicht um die Speicherung oder Authentifizierung von Benutzern kümmern. Keycloak bietet Benutzer-Föderation, starke Authentifizierung,...

lightwave

Was ist Lightwave Project Lightwave ist ein Open-Source-Projekt, das aus Enterprise-Identitäts- und Zugriffsverwaltungsdiensten besteht, die auf kritische Sicherheits-, Governance- und Compliance-Herausforderungen für Cloud-native Apps im Unternehmen abzielen. Durch die Integration mit Project...

CVE-2026-69851 Microsoft Entra ID Elevation of Privilege Vulnerability

...

Keycloak 26.4.x < 26.4.15 / 26.6.x < 26.6.6 Unauthenticated Account Takeover

The version of Keycloak installed on the remote host is 26.4.x prior to 26.4.15, or 26.6.x prior to 26.6.6. It is, therefore, affected by a vulnerability: - A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access...

CVE-2026-15571

Keycloak's legacy client-initiated account-linking endpoint uses a predictable hash to protect against unauthorized requests. A malicious OIDC client can forge a valid linking URL after tricking a victim to authenticate, connecting the victim's account to the attacker's external identity and enab...

EUVD-2026-61238

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC...

CVE-2026-18963

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the...

CVE-2026-18963

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the...