18273 matches found
EUVD-2026-95592
Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1...
CVE-2026-96333
The GiveWP WordPress plugin (versions
CVE-2026-96333 WordPress GiveWP plugin <= 4.16.8.1 - Payment Bypass vulnerability
Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1...
CVE-2026-96336
The WPMU DEV Forminator WordPress plugin is vulnerable to an Authentication Bypass by Spoofing vulnerability (CWE-290) in versions up to and including 1.57.2 . This flaw allows for Identity Spoofing , where an attacker can bypass authentication mechanisms. The impact is categorized as HIGH severi...
EUVD-2026-95589
Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2...
CVE-2026-96336 WordPress Forminator plugin <= 1.57.2 - Payment Bypass vulnerability
Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2...
CVE-2026-106488
A flaw was found in plugin-auth-backend-module-oidc-provider. In deployments using email-based identity resolution with an OpenID Connect OIDC provider that allows unverified email addresses, an authenticated attacker can achieve privilege escalation by assuming another catalog identity. This...
lightwave
Lightwave란 무엇인가? Project Lightwave는 기업 내 Cloud-Native App을 위한 중요한 보안, 거버넌스 및 규정 준수 과제를 대상으로 하는 엔터프라이즈급 ID 및 액세스 관리 서비스로 구성된 오픈 소스 프로젝트입니다. Project Photon과의 통합을 통해 Project Lightwave는 컨테이너 워크로드에 대한 보안과 거버넌스를 제공할 수 있습니다. Project Lightwave는 또한 single sign-on, 인증, 권한 부여 및 인증 기관certificate authority은 물...
cloudfoundry_uaa
CloudFoundry 사용자 계정 및 인증UAA 서버 UAA는 Cloud Foundry에서 사용되는 멀티 테넌트 ID 관리 서비스이지만, 독립형 OAuth2 서버로도 사용할 수 있습니다. 주요 역할은 OAuth2 공급자로, 클라이언트 애플리케이션이 Cloud Foundry 사용자를 대신하여 작업할 때 사용할 토큰을 발급하는 것입니다. 또한 Cloud Foundry 자격 증명을 사용하여 사용자를 인증할 수 있으며, 해당 자격 증명또는 다른 자격 증명을 사용하여 SSO 서비스로 작동할 수 있습니다. 사용자 계정 관리 및 OAut...
torghost
Что такое TorGhost? TorGhost — это скрипт для анонимизации. TorGhost перенаправляет весь интернет-трафик через SOCKS5-прокси Tor. DNS-запросы также перенаправляются через Tor, что предотвращает утечку DNS DNSLeak. Скрипт также блокирует исходящие небезопасные пакеты. Некоторые пакеты, например...
VMware Workspace ONE Access - Authentication Bypass
VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework. id: CVE-2022-22956...
PT-2026-108854
Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1...
PT-2026-108856
Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2...
CVE-2026-3055
🔥 NetScalerBleed2: Citrix NetScaler における重大な未認証メモリ越え読み出し CVE-2026-3055 未認証のバッファ外メモリ読み出し（メモリリーク） SAML ID プロバイダー IdP として構成されているアプライアンスのみに影響 📋 概要 CVE-2026-3055 は、Citrix NetScaler ADC および NetScaler Gateway における重大な バッファ外読み出しの脆弱性（CWE-125）です。 この脆弱性は、SAML 処理中の不十分な入力検証 によって引き起こされます。未認証の...
CVE-2026-78407
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...
CVE-2026-78401
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...
CVE-2026-78406
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...
CVE-2026-78399
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially crafted HTTP query due to improper allocation of system resources...
CVE-2026-78388
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...