CVE-2026-19607 Keycloak-services: keycloak-services: broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

EUVD-2026-80855

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2026-19607

A flaw in the first-broker-login flow of the keycloak-services component in Red Hat build of Keycloak allows an attacker to register a matching username on an external identity provider, triggering a username collision that locks out the legitimate user. The root cause is insufficient validation ...

keycloak-services: keycloak-services: Broker-originated username collision causes account lockout

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2026-91843

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges...

Tell-Me-Root

Tell Me Root（基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测工具） 这是一个基于 Python 编写的超级超级超级轻量级工具！ 解放双手，批量扫描，坐等shell喂到嘴边！ 草履虫也能轻松挖到漏洞！！！ 🚀 功能特性 批量处理 ：支持从文本文件（默认 iplist.txt）批量导入目标 IP。 智能预检 ：在启动 Telnet 客户端前，先通过 Socket 进行端口存活检测，避免因 IP 不通导致的无效等待。 自动payload检查 ：内置 payloads，自动尝试登录目标服务器。直接在当前窗口拿到权限。 实时进度监控 ：清晰展示当前处理进度（例...

CVE-2026-19607

A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the initial authentication and account linking when a user logs in via an external identity provider. The issue allows an attacker to register a matching username on an external provider to...

CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass ¿En serio, telnet en 2026? Vamos, amigos, ya es hora de pasar página. SSH existe desde 1995. 🤦 Descripción Una vulnerabilidad crítica de omisión de autenticación en GNU Inetutils telnetd que afecta a las versiones 1.9.3 hasta 2.7. ...

EUVD-2026-80699

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges...

CVE-2026-91843 Stack overflow in login process to the Security Management and Log Servers

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges...

CVE-2026-91843

CheckPoint Security Management and Log Servers are affected by a stack overflow in the unauthenticated login process , which may allow a remote attacker to execute arbitrary code with root privileges . The vulnerability is rated CVSS 9.8 (Critical) with a network attack vector requiring no privil...

CVE-2024-9933

CVE-2024-9933 WatchTowerHQ = 3.10.1 - Omisión de Autenticación a Administrador debido a la Falta de Verificación de Valor Vacío Descripción: El plugin WatchTowerHQ para WordPress es vulnerable a una omisión de autenticación en versiones hasta la 3.9.6 inclusive. Esto se debe a que el valor...

CVE-2024-50478

CVE-2024-50478 1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover Description: The 1-Click Login: Passwordless Authentication plugin for WordPress is vulnerable to authentication bypass in version 1.4.5. This is due to the plugin not properly verifying a...

CVE-2025-55462

CVE-2025-55462 Resumen de la vulnerabilidad Se identificó una mala configuración de Cross-Origin Resource Sharing CORS en Eramba Community y Enterprise Editions v3.26.0. La aplicación refleja los encabezados Origin controlados por el atacante en el encabezado de respuesta...

SUSE-SU-2026:4211-1 Security update for kbd

This update for kbd fixes the following issue: - CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441...

Security update for kbd

This update for kbd fixes the following issue: CVE-2026-72693: local privilege escalation in openvt due to incorrect process owner verification that allows passwordless root login bsc1275441. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

CVE-2021-43650

CVE-2021-43650 Webrun = 3.6.0.42 SQLi Descripción Webrun es una aplicación de gestión basada en web. En la versión 3.6.0.42 fue posible identificar y reportar una vulnerabilidad de inyección SQL que ocurre durante el proceso de inicio de sesión; más específicamente, inyectaremos el payload en el...

CVE-2025-47646

🔐 CVE-2025-47646 – Inicio de sesión y registro front-end de PSW = 1.12 📌 Información del plugin Plugin : PSW Front-end Login & Registration Versión vulnerable : = 1.12 CVE : CVE-2025-47646 Gravedad : Alta CVSS 9.8 Tipo de vulnerabilidad : Autenticación rota Privilegio requerido : No autenticado...

DEBIAN-CVE-2026-90011

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Reserve a terminator byte for the login payload iscsitargetcheckloginrequest rejects a login PDU whose DataSegmentLength exceeds MAXKEYVALUEPAIRS, but the test is '' and login-reqbuf is allocated with exactly...

CVE-2024-4701-POC

CVE-2024-4701-POC POC para CVE-2024-4701 Descarga el archivo docker de genie desde https://netflix.github.io/genie/docs/4.3.0/demo/docker-compose.yml o desde este repositorio Ejecuta docker-compose up Descarga el payload http adjunto loadlib Ejecuta el siguiente comando nc -w 5 localhost 8080...