23820 matches found
EUVD-2026-57944
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
CVE-2026-28008
CVE-2026-28008 affects the WordPress plugin OAuth Single Sign On – SSO (OAuth Client) for versions ≤ 7.0.0. The vulnerability is described as Unauthenticated Broken Authentication , exposing a high-severity risk with a CVSSv3.1 base score of 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Th...
CVE-2026-28008
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by sequenceX0 in WordPress Plugin SAML SP Single Sign On versions = 5.4.3...
brakeman v8.0.6
Brakeman Brakeman is a static analysis tool which checks Ruby on Rails applications for security vulnerabilities. Installation Using RubyGems: root@kitploit: gem install brakeman Using Bundler: root@kitploit: group :development do gem 'brakeman', require: false end Using Docker: root@kitploit:...
EUVD-2026-57713
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...
CVE-2026-66660: Missing Authorization
Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on = 2.5.1 versions...
CVE-2026-61979: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-28148: Improper Verification of Cryptographic Signature
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
CVE-2026-28008: Authentication Bypass by Spoofing
Unauthenticated Broken Authentication in OAuth Single Sign On – SSO OAuth Client = 7.0.0 versions...
CVE-2026-70454: Improper Certificate Validation
rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...
CVE-2026-73662: Improper Neutralization of Special Elements used in an OS Command
FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...
CVE-2026-72640: Unintended Proxy or Intermediary
The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...
PT-2026-71883
Name of the Vulnerable Software and Affected Versions FreePBX versions 17.0.1 through 17.0.6 Description The Music on Hold module allows dangerous command-line options for /usr/bin/mpg123 and other permitted players within the validateCustomConfiguration function in Music.class.php. Because the...
PT-2026-71512
Name of the Vulnerable Software and Affected Versions Headless Single Sign On versions prior to 1.7 Description An unauthenticated bypass issue exists that allows users to circumvent the authentication process. Recommendations Update to a version newer than 1.6...
PT-2026-71542
Name of the Vulnerable Software and Affected Versions SAML SP Single Sign On versions prior to 5.4.4 Description An unauthenticated privilege escalation flaw allows attackers to sign in as any WordPress user, including administrators. Recommendations Update to a version newer than 5.4.3...
PT-2026-71654
Name of the Vulnerable Software and Affected Versions rsync versions 3.2.0 through 3.2.3 rsync-ssl versions prior to 3.4.5 Description A TLS certificate validation issue allows on-path attackers to intercept encrypted sessions by presenting self-signed or invalid certificates. This occurs because...
CVE-2026-72648: Cleartext Storage of Sensitive Information in an Environment Variable
Cleartext Storage of Sensitive Information in an Environment Variable CWE-526 in Elastic Cloud on Kubernetes ECK can lead to information disclosure via Retrieve Embedded Sensitive Data CAPEC-37. When ECK reconciles a Fleet Server resource that authenticates to Elasticsearch with a service account...
CVE-2026-70454: Improper Certificate Validation
rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...