Lucene search
+L

163 matches found

Kitploit
Kitploit
added 2026/09/16 10:03 p.m.17 views

auth

Autenticación de PlaceOS VARIABLES DE ENTORNO root@kitploit: If a sentry Data Source Name is configured SENTRYDSN=https://@.ingest.sentry.io/ A shared secret for encrypting cookies SECRETKEYBASE=84b04ea4259542f365 JWT Private key JWTSECRET=Base64 Encoded RSA PRIVATE KEY Database name and host...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/15 9:36 p.m.6 views

CVE-2026-73309

CVE-2026-73309 XenForo before 2.3.13 can skip OAuth2 client-secret and PKCE verification when an empty string reaches the token endpoint. What happens The endpoint checks whether clientsecret and codeverifier keys exist, then performs the comparisons only when their PHP string values are truthy. ...

9.1CVSS6AI score0.00476EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 8:48 p.m.9 views

CVE-2026-3456-OAuth2-PKCE-Race-Condition-Account-Takeover-

8. CVE-2026-3456 – Condición de carrera en OAuth2 PKCE Toma de control de cuenta Resumen Una condición de carrera en el servidor de autorización OAuth2 permite que un atacante reutilice el código de autorización de la víctima antes de que el cliente legítimo lo canjee, adivinando o forzando por...

7.5CVSS6AI score0.00278EPSS
SaveExploits1
OSV
OSV
added 2026/09/15 9:57 a.m.3 views

CVE-2026-48717 OpenAM OAuth Authorization Bypass via PKCE Challenge

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeHandler requires a codeverifier only when the realm-wide codeVerifierEnforced setting is enabled, even when an authorization code stores a codechallenge. Because that setting is disabled by...

9.1CVSS5.7AI score
SaveExploits0References5
NVD
NVD
added 2026/09/12 11:16 a.m.8 views

CVE-2026-90474

MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens...

7.6CVSS0.003EPSS
SaveExploits0References5
CVE
CVE
added 2026/09/12 11:06 a.m.26 views

CVE-2026-90474

MCPHub before 1.0.32 is affected by an authentication bypass in its embedded OAuth 2.0 authorization server. The root cause is that client authentication is disabled by default and PKCE enforcement is optional , allowing an attacker who intercepts an authorization code to redeem it for an access ...

7.6CVSS5.7AI score0.003EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/12 11:06 a.m.8 views

CVE-2026-90474 MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass

MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens...

7.6CVSS5.8AI score
SaveExploits0References7
EUVD
EUVD
added 2026/09/12 11:06 a.m.8 views

EUVD-2026-76850

MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens...

7.6CVSS5.7AI score0.003EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/09/12 11:06 a.m.39 views

CVE-2026-90474 MCPHub before 1.0.32 OAuth 2.0 Authentication Bypass

MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens...

7.6CVSS0.003EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/12 12:00 a.m.14 views

PT-2026-90637

MCPHub before 1.0.32 contains an authentication bypass vulnerability in its embedded OAuth 2.0 authorization server where client authentication is disabled by default and PKCE enforcement is optional. Attackers who obtain an authorization code through interception can redeem it for access tokens...

7.6CVSS5.7AI score0.003EPSS
SaveExploits0References10
Veracode
Veracode
added 2026/09/11 9:34 a.m.5 views

Improper Input Validation

Apache CXF is vulnerable to Improper Input Validation. The vulnerability is due to JwtRequestCodeFilter copying security-sensitive claims from a signed request JWT into the authorization parameter map without proper validation, which allows an attacker with a validly signed JWT to replace...

9.1CVSS5.8AI score0.00266EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/09/08 1:15 p.m.34 views

CVE-2026-73309 XenForo < 2.3.13 Authentication Bypass via OAuth2 Token Endpoint

XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs by submitting empty values for clientsecret and codeverifier parameters. Attackers can exploit PHP truthy evaluation logic, which...

9.1CVSS0.00476EPSS
SaveExploits2References5
CVE
CVE
added 2026/09/08 1:15 p.m.13 views

CVE-2026-73309

XenForo before 2.3.13 is vulnerable to an authentication bypass in its OAuth2 token endpoint . An unauthenticated attacker can submit empty strings for the client_secret and code_verifier parameters; because PHP truthy evaluation treats empty strings as falsy, both the client secret check and the...

9.1CVSS5.8AI score0.00476EPSS
SaveExploits2References5Affected Software1
EUVD
EUVD
added 2026/09/08 1:15 p.m.8 views

EUVD-2026-72780

XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs by submitting empty values for clientsecret and codeverifier parameters. Attackers can exploit PHP truthy evaluation logic, which...

9.1CVSS5.8AI score0.00476EPSS
SaveExploits2References3
RedHat Linux
RedHat Linux
added 2026/09/01 5:31 p.m.15 views

Important: Red Hat Security Advisory: rest security update

An update for rest is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

6.8CVSS5.9AI score0.00254EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/01 5:31 p.m.11 views

librest: weak random number generation in PKCE implementation

A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generator. Because the generated "code verifier" lacks sufficient cryptographic entropy, a malicious actor can reverse-engineer...

6.8CVSS5.9AI score0.00254EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.10 views

RHEL 10 : rest (RHSA-2026:62222)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62222 advisory. The rest packages provide a library for access to the RESTful web services. Security Fixes: librest: weak random number generation in PKCE...

6.8CVSS6AI score0.00254EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/01 12:00 a.m.9 views

openSUSE 16 Security Update : librest (openSUSE-SU-2026:21694-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21694-1 advisory. This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseud...

6.8CVSS5.9AI score0.00254EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2026/08/31 12:00 a.m.6 views

Security update for librest (moderate)

openSUSE security update: security update for librest ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21694-1 Rating: moderate References: bsc1272399 Cross-References: CVE-2026-16615 CVSS scores: CVE-2026-16615 SUSE : 6.8...

6.8CVSS5.8AI score0.00254EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/30 2:33 p.m.8 views

OPENSUSE-SU-2026:21694-1 Security update for librest

This update for librest fixes the following issue: - CVE-2026-16615: PKCE implementation for OAuth authorization uses a cryptographically insecure pseudo-random number generator bsc1272399...

6.8CVSS5.9AI score0.00254EPSS
SaveExploits0References2
Rows per page
Query Builder