46193 matches found
CVE-2026-75170
Cross-site scripting XSS vulnerability in the /loginController/doLogin endpoint of the HubCore platform version 14.1.1 allows a remote unauthenticated attacker to inject arbitrary JavaScript into the application's response via the language POST parameter...
EUVD-2026-70698
Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identity provider callback at GET /auth/external accepts attacker-controlled redirect URIs that only need to start with a registered client redirect URI, rather than matching exactly...
SUSE CVE-2026-12704
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP-initiated logins. This removes anti-replay protection, allowing an attacker who obtains a valid signed SAML assertion to replay it and ga...
grafana: Grafana: Denial of Service via unbounded memory growth in OAuth login route
A flaw was found in Grafana. An unauthenticated attacker can repeatedly access the OAuth login route with unique values. This can lead to unbounded memory growth, eventually exhausting system memory and causing the Grafana instance to crash. This results in a denial of service for legitimate user...
grafana: Grafana: Denial of Service via unbounded memory growth in OAuth login route
A flaw was found in Grafana. An unauthenticated attacker can repeatedly access the OAuth login route with unique values. This can lead to unbounded memory growth, eventually exhausting system memory and causing the Grafana instance to crash. This results in a denial of service for legitimate user...
WordPress theme My Login plugin 7.0-7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation vulnerability
Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation vulnerability discovered by Jakub Herman in WordPress Plugin Theme My Login versions 7.0-7.1.15...
pac4j-check v0.2.0
pac4j-check 离线排查 CVE-2026-29000CVSS 10.0—— 包括官方 advisory 没有列出的那些包。 English | 中文 单个 jar,约 24KB,零运行时依赖,Java 8 起可用,完全离线,不外传任何数据。 这个漏洞是什么 org.pac4j:pac4j-jwt 的 JwtAuthenticator 在处理加密 JWTJWE 时未强制校验签名。 攻击者只要拿到服务器的 RSA 公钥公钥本来就是公开的, 就能构造一个 JWE 包裹的 PlainJWT,把 subject 和 role 写成任意值, 以任意用户身份登录,包括管理员 。无需任何凭据。...
GHSA-7MGC-C7PQ-3RR3 Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge
Summary When 2FA is enabled on an account, submitting correct credentials authenticates the user but leaves them unauthorized pending TOTP verification. During this pending-challenge window, the login.regenerate2FASecret task which requires only $user-exists, not $user-authorized can be called...
Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge
Summary When 2FA is enabled on an account, submitting correct credentials authenticates the user but leaves them unauthorized pending TOTP verification. During this pending-challenge window, the login.regenerate2FASecret task which requires only $user-exists, not $user-authorized can be called...
EUVD-2026-62540
Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge...
DRUPAL-CONTRIB-2026-128
This module enables you to log the emails sent by Mailer Plus as content entities, so they can be reviewed at Reports Mail log. The module doesn't sufficiently redact the content of the emails it logs. Account related emails are stored with their one-time login links intact, so any user who can...
CVE-2026-12704
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP-initiated logins. This removes anti-replay protection, allowing an attacker who obtains a valid signed SAML assertion to replay it and ga...
CVE-2026-12704
In Grafana Enterprise , enabling the allow_idp_initiated SAML setting (off by default) causes the SAML library to skip validation of the InResponseTo field on all SAML responses, including SP-initiated logins. This removes anti-replay protection , allowing an attacker who obtains a valid signed S...
CVE-2026-12704 SAML assertion replay via skipped InResponseTo validation
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP-initiated logins. This removes anti-replay protection, allowing an attacker who obtains a valid signed SAML assertion to replay it and ga...
CVE-2026-12704 SAML assertion replay via skipped InResponseTo validation
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP-initiated logins. This removes anti-replay protection, allowing an attacker who obtains a valid signed SAML assertion to replay it and ga...
EUVD-2026-70197
When SAML IdP-initiated login is enabled in Grafana Enterprise, the SAML library skips validation of the InResponseTo field on all SAML responses, including SP-initiated logins. This removes anti-replay protection, allowing an attacker who obtains a valid signed SAML assertion to replay it and ga...
io.jenkins.plugins:design-library (>=444.v568b_174ece88, <=483.v401c307fdd1b), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +5 more potentially affected by CVE-2026-84655 via org.kohsuke.stapler:stapler (>=2092.v91b_2c63e0c97, <=2107.v8dfcb_e8ed317)
org.kohsuke.stapler:stapler MAVEN version =2092.v91b2c63e0c97, =444.v568b174ece88, =2.569, =2.569, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2107.v8dfcbe8ed317 Source cves: CVE-2026-84655 Source advisory: MEND:CVE-2026-84655...
io.jenkins.plugins:design-library (>=444.v568b_174ece88, <=483.v401c307fdd1b), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +1 more potentially affected by CVE-2026-84650 via org.jenkins-ci.main:jenkins-core (>=2.569, <=2.579)
org.jenkins-ci.main:jenkins-core MAVEN version =2.569, =444.v568b174ece88, =2.569, =2.579 Source cves: CVE-2026-84650 Source advisory: MEND:CVE-2026-84650...
io.jenkins.plugins:design-library (>=444.v568b_174ece88, <=483.v401c307fdd1b), io.jenkins.plugins:login-theme (339.v8f0b_a_5695303) +5 more potentially affected by CVE-2026-84649 via org.kohsuke.stapler:stapler (>=2092.v91b_2c63e0c97, <=2107.v8dfcb_e8ed317)
org.kohsuke.stapler:stapler MAVEN version =2092.v91b2c63e0c97, =444.v568b174ece88, =2.569, =2.569, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2092.v91b2c63e0c97, =2107.v8dfcbe8ed317 Source cves: CVE-2026-84649 Source advisory: MEND:CVE-2026-84649...