WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting

WordPress OpenID Connect Generic Client plugin 3.8.0 and 3.8.1 contains a cross-site scripting vulnerability. It does not sanitize the login error when output back in the login form, thereby not requiring authentication, which can be exploited with the default configuration. id: CVE-2021-24214...

Payara Micro Community 5.2021.6 Directory Traversal

Payara Micro Community 5.2021.6 and below contains a directory traversal vulnerability. id: CVE-2021-41381 info: name: Payara Micro Community 5.2021.6 Directory Traversal author: pikpikcu severity: high description: Payara Micro Community 5.2021.6 and below contains a directory traversal...

Keycloak < 24.0.5 - Broken Access Control

A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. id: CVE-2024-3656 info...

oauth-scan

OAUTHScan Descripción OAUTHScan es una extensión de Burp Suite escrita en Java con el objetivo de proporcionar algunas comprobaciones de seguridad automáticas, que pueden ser útiles durante las pruebas de penetración en aplicaciones que implementan los estándares OAUTHv2 y OpenID. El plugin busca...

dex

dex - Un proveedor OpenID Connect federado Dex es un servicio de identidad que utiliza OpenID Connect para impulsar la autenticación de otras aplicaciones. Dex actúa como un portal hacia otros proveedores de identidad a través de "conectores". Esto permite que dex delegue la autenticación en...

hydra

Chat · Debates · Boletín · Documentación · Prueba Ory Network · Empleo Ory Hydra es un servidor OAuth 2.0 reforzado y certificado OpenID, así como un proveedor de OpenID Connect, optimizado para baja latencia, alto rendimiento y bajo consumo de recursos. Se conecta a su proveedor de identidad...

kratos

Chat · Discusiones · Boletín informativo · Documentación · Probar Ory Network · Empleos Ory Kratos es un sistema de gestión de identidad y usuarios API-first para aplicaciones nativas de la nube. Centraliza los flujos de inicio de sesión, registro, recuperación, verificación y gestión de perfiles...

boundary

Boundary Qué es Boundary: https://developer.hashicorp.com/boundary/docs/what-is-boundary Sitio web: https://www.developer.hashicorp.com/boundary/ Foros: HashiCorp Discuss Documentación: https://developer.hashicorp.com/boundary/docs Tutoriales: Plataforma de aprendizaje de HashiCorp Boundary es un...

pocKeycloakCVE-2023-0264

PoC CVE-2023-0264 — front OIDC session hijacking Front estático que ejecuta el flujo OIDC authorization code contra un Keycloak y expone el hook de secuestro de sessionid del PoC. Se sirve con nginx en el puerto 5174 para uso del equipo. Levantarlo en la VPS root@kitploit: cd vps/pocCVE0264 docke...

OAUTHScan

OAUTHScan Descripción OAUTHScan es una extensión de Burp Suite escrita en Java con el objetivo de proporcionar algunas comprobaciones automáticas de seguridad, que podrían ser útiles durante las pruebas de penetración en aplicaciones que implementan los estándares OAUTHv2 y OpenID. El plugin busc...

FlowAnalyzer

Flow Analyzer Flow Analyzer está diseñado para ayudar en la comprensión de bajo nivel y en las pruebas de los Grants/Flows de OAuth 2.0. Aunque mis casos de uso provienen del lado de la seguridad, también puede ser beneficioso desde el punto de vista de un ingeniero 😊 Encontrarás los notebooks pa...

CVE-2026-55221

Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.10.0, Boruta logged sensitive OAuth and OpenID Connect values in business event logs. Logged values could include access tokens, refresh...

CVE-2026-55221 Boruta: OAuth credentials exposed in Boruta business logs

Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up to decentralized identity specifications. Prior to version 0.10.0, Boruta logged sensitive OAuth and OpenID Connect values in business event logs. Logged values could include access tokens, refresh...

CVE-2026-82183 OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID Assertion

The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...

EEF-CVE-2026-75759 Encrypted ID token or JARM response accepted without a nested signature in erlef oidcc

Summary Improper Verification of Cryptographic Signature vulnerability in erlef oidcc allows an unauthenticated attacker to impersonate an arbitrary user via an encrypted ID token or JARM response carrying no nested signature. OpenID Connect Core 1.0 section 2 requires that an encrypted ID token ...

CVE-2026-82462 pac4j-oidc before 6.5.6 Authentication Bypass via Access Token Substitution

pac4j-oidc before 6.5.6 accepts OIDC callbacks carrying only an access token without authorization code or ID token validation. Attackers can substitute access tokens minted for other clients to create authenticated sessions without proper issuer, audience, nonce, or subject verification...

CVE-2026-63687

A flaw was found in Apache CXF. This vulnerability allows an attacker, who has compromised a client's secret, to bypass critical security protections in the authorization process. By injecting malicious values for parameters like codechallenge and nonce, the attacker can undermine the integrity o...

Linux Distros Unpatched Vulnerability : CVE-2026-70665

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client...

DEBIAN-CVE-2026-70665

Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registration DCR endpoint persists client-supplied scopes without validating them against the server's configured scope set. Under certai...

CVE-2026-70665

Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registration DCR endpoint persists client-supplied scopes without validating them against the server's configured scope set. Under certai...