Malicious code in oauth-standard-umbra-antares (npm)

The package oauth-standard-umbra-antares was found to contain malicious code...

Malicious code in module-xenos-install-oauth (npm)

The package module-xenos-install-oauth was found to contain malicious code...

MAL-2025-46579 Malicious code in wavefunction-oauth-hadron-celeste (npm)

The package wavefunction-oauth-hadron-celeste was found to contain malicious code...

MAL-2025-45403 Malicious code in oauth-venus-nconf-supervisor (npm)

The package oauth-venus-nconf-supervisor was found to contain malicious code...

MAL-2025-46792 Malicious code in yildun-writable-mensa-oauth (npm)

The package yildun-writable-mensa-oauth was found to contain malicious code...

Malicious code in yildun-writable-mensa-oauth (npm)

The package yildun-writable-mensa-oauth was found to contain malicious code...

Malicious code in oauth-venus-nconf-supervisor (npm)

The package oauth-venus-nconf-supervisor was found to contain malicious code...

MAL-2025-45594 Malicious code in private-oauth-jsonp-geomorphology (npm)

The package private-oauth-jsonp-geomorphology was found to contain malicious code...

Malicious code in wavefunction-oauth-hadron-celeste (npm)

The package wavefunction-oauth-hadron-celeste was found to contain malicious code...

Malicious code in dotenv-parse-variables-oauth-pavo-meteor (npm)

The package dotenv-parse-variables-oauth-pavo-meteor was found to contain malicious code...

MAL-2025-45212 Malicious code in module-xenos-install-oauth (npm)

The package module-xenos-install-oauth was found to contain malicious code...

Security Bulletin: There is a vulnerability in kafka-clients-3.8.0.jar used by IBM Maximo Asset Management application (CVE-2025-27817,CVE-2025-27818)

Summary There is a vulnerability in kafka-clients-3.8.0.jar used by IBM Maximo Asset Management application CVE-2025-27817,CVE-2025-27818 Vulnerability Details CVEID:CVE-2025-27817 DESCRIPTION: A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apach...

CVE-2025-55739 api: Shared OAuth Signing Key Between Different Instances

api is a module for FreePBX@, which is an open source GUI that controls and manages Asterisk© PBX. In versions lower than 15.0.13, 16.0.2 through 16.0.14, 17.0.1 and 17.0.2, there is an identical OAuth private key used across multiple systems that installed the same FreePBX RPM or DEB package. An...

CVE-2025-9636

pgAdmin = 9.7 is affected by a Cross-Origin Opener Policy COOP vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation...

CVE-2025-9636

CVE-2025-9636 affects pgAdmin4 (notably pgadmin4 packages in multiple Linux distributions). The vulnerability is a Cross-Origin Opener Policy (COOP) issue that could allow an attacker to manipulate the OAuth flow, potentially leading to restricted for unauthorised account access, account takeover...

CVE-2025-9636 Cross-Origin Opener Policy Vulnerability in pgAdmin 4

pgAdmin = 9.7 is affected by a Cross-Origin Opener Policy COOP vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation...

CVE-2025-9636 Cross-Origin Opener Policy Vulnerability in pgAdmin 4

pgAdmin = 9.7 is affected by a Cross-Origin Opener Policy COOP vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation...

CVE-2025-55162

CVE-2025-55162 affects Envoy (OAuth2 filter). The issue is insufficient Session Expiration: when cookie names are __Secure- or __Host-, the filter fails to add the Secure attribute to the Set-Cookie header during deletion, causing cookies to persist and enabling session hijacking on shared machin...

Linux Distros Unpatched Vulnerability : CVE-2022-21673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Grafana is an open-source platform for monitoring and observability. In affected versions when a data source has the Forward OAuth Identity feature enabled,...

VulnCheck KEV: CVE-2022-22956

VMware Workspace ONE Access has two authentication bypass vulnerabilities CVE-2022-22955 & CVE-2022-22956 in the OAuth2 ACS framework. A malicious actor may bypass the authentication mechanism and execute any operation due to exposed endpoints in the authentication framework...