302 matches found
EUVD-2026-108513
Authlib: issecuretransport loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts...
samsung-exynos-sms-stack-overflow-cve-2025-54328-critical-zero-click-baseband-rce
CVE-2025-54328 — Samsung Exynos SMS RP-DATA Stack Buffer Overflow Conceptual PoC for CVE-2025-54328, a CVSS 10.0 Critical stack-based buffer overflow in Samsung Exynos baseband firmware's SMS RP-DATA parser. Article Full write-up: Samsung Exynos SMS Stack Overflow: CVE-2025-54328 — Critical...
UBUNTU-CVE-2026-114614
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host can be accepted even when its parsed host ...
SUSE CVE-2026-114614
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host can be accepted even when its parsed host ...
Linux Distros Unpatched Vulnerability : CVE-2026-114614
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefi...
DEBIAN-CVE-2026-114614
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host can be accepted even when its parsed host ...
CVE-2026-114614
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host can be accepted even when its parsed host ...
CVE-2026-114614
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host can be accepted even when its parsed host ...
CVE-2026-114614 Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host can be accepted even when its parsed host ...
CVE-2026-114614 Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host can be accepted even when its parsed host ...
CVE-2026-114614
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host can be accepted even when its parsed host ...
CVE-2026-114614
The Authlib Python library (versions 0.13 through 1.8.0 ) is vulnerable due to a flaw in authlib.common.security.is_secure_transport() . The function uses a textual prefix comparison for loopback HTTP exemptions, which can be exploited if a URL's userinfo component begins with a loopback host whi...
CVE-2026-114614
Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.issecuretransport uses a textual prefix comparison for loopback HTTP exemptions, so a URL whose userinfo begins with a loopback host can be accepted even when its parsed host ...
Hello-VT-rp
Hello-VT-rp A simple hypervisor demonstrating the use of the Intel VT-rp redirect protection technology. This repository is a complement of the Intel VT-rp blog post series and not meant for a general use. For the overview of Intel VT-rp, please read the post. The hypervisor The hypervisor/...
PT-2026-121661
Name of the Vulnerable Software and Affected Versions Authlib versions 0.13 through 1.7.9 Description The is secure transport function in authlib/common/security.py uses a textual prefix comparison for loopback HTTP exemptions. This allows a URL with a userinfo component starting with a loopback...
CVE-2026-55587 AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID
AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser extension passkey provider does not bind passkey requests to the actual webpage origin or verify that the requested relying-party identifier matches the current website. A maliciou...
CVE-2026-55587
The AliasVault browser extension, prior to version 0.29.4 , contains a WebAuthn bridge vulnerability where it fails to bind passkey requests to the actual webpage origin or verify that the requested relying-party identifier matches the current website. A malicious website can provide forged origi...
CVE-2026-55587 AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID
AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser extension passkey provider does not bind passkey requests to the actual webpage origin or verify that the requested relying-party identifier matches the current website. A maliciou...
CVE-2026-102017
An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled...
CVE-2026-102017 Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled
An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled...