keycloak-policy-enforcer: Keycloak Policy Enforcer: Authorization bypass via incorrect URI comparison

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access UMA permission checks. By including the configured access-denied page path within a request URL, either as a path...

EUVD-2020-27971

Malware in sbrugna...

GO-2025-3537 OWASP Coraza WAF has parser confusion which leads to wrong URI in `REQUEST_FILENAME` in github.com/corazawaf/coraza

OWASP Coraza WAF has parser confusion which leads to wrong URI in REQUESTFILENAME in github.com/corazawaf/coraza...

CVE-2020-6827: Improper Restriction of Rendered UI Layers or Frames

When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI. Note: This issue only affects Firefox for Android. Other operating systems are unaffected.. This vulnerability affects Firefox ESR...

PT-2020-19249

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 68.7 Firefox ESR versions prior to 68.7 Description The issue affects Firefox for Android, where following a link that opens an intent://-schemed URL can cause a custom tab to display the incorrect URI. Th...