4383 matches found
CVE-2026-65633
AshAuthentication (team-alembic) contains an improper authentication flaw where the stateless bearer-token helper retrieve_from_bearer/3 fails to verify that a JWT's purpose claim equals user. When a resource uses the default require_token_presence_for_authentication?: false, purpose-limited toke...
CVE-2026-75933
Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain...
EUVD-2026-63998
Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain...
CVE-2026-75933
Jet Admin is vulnerable to a stored cross-site scripting (XSS) flaw in the sign-in page's scripts and styles option. An authenticated attacker can inject arbitrary JavaScript that executes in the context of any visiting user's domain, enabling session hijacking, data exfiltration, or further comp...
CVE-2026-75933 Jet Admin Stored XSS
Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain...
Jet Admin Cloud Platform multiple vulnerabilities
RISK EVALUATION Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the...
PT-2026-79399
Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain...
Linux Distros Unpatched Vulnerability : CVE-2026-77014
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result...
CVE-2026-75145
FFmpeg before commit b4c199c contains an incorrect integer narrowing conversion in the AV1 RTP packetizer libavformat/rtpencav1.c. The OBU size is cast to long before comparison against the remaining frame size. On targets where long is 32 bits, including 64-bit Windows, sufficiently large OBU si...
WordPress SAML Single Sign On plugin 4.8.85-5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite vulnerability
Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite vulnerability discovered by Suhayb Ahmed in WordPress Plugin SAML Single Sign On – SSO Login versions 4.8.85-5.4.6...
CVE-2026-19842
The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticat...
CVE-2026-19842 SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite
The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticat...
CVE-2026-19842
The WordPress SAML Single Sign On plugin (versions 4.8.85–5.4.6) fails to verify SAML response signatures before storing certificates, then exposes a one-click admin control that promotes any stored certificate to the trusted signing anchor. An unauthenticated attacker can submit a self-signed ce...
EUVD-2026-60582
A vulnerability was determined in karakeep-app karakeep up to 0.32.0. The impacted element is an unknown function of the file apps/web/server/auth.ts of the component OAuth Sign-In. This manipulation causes improper authentication. It is possible to initiate the attack remotely. The complexity of...
CVE-2026-75774 karakeep-app karakeep OAuth Sign-In auth.ts improper authentication
A vulnerability was determined in karakeep-app karakeep up to 0.32.0. The impacted element is an unknown function of the file apps/web/server/auth.ts of the component OAuth Sign-In. This manipulation causes improper authentication. It is possible to initiate the attack remotely. The complexity of...
CVE-2026-75774
Karakeep up to 0.32.0 has an improper authentication flaw in its OAuth Sign-In logic (file apps/web/server/auth.ts). Attack complexity is high and no patch has been released yet, as the project has not responded to the issue report. Exploitation details are not publicly provided in the documents.
CVE-2026-75774 karakeep-app karakeep OAuth Sign-In auth.ts improper authentication
A vulnerability was determined in karakeep-app karakeep up to 0.32.0. The impacted element is an unknown function of the file apps/web/server/auth.ts of the component OAuth Sign-In. This manipulation causes improper authentication. It is possible to initiate the attack remotely. The complexity of...
EUVD-2026-59916
The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google identity tokens it accepts, allowing unauthenticated users to authenticate as any user whose email address such a token carries, up to and including an administrator. Every site with the Simple JWT Log...
CVE-2026-73420 NextAuth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass
NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the defaultNormalizer used by the email and magic-link sign-in flow validates an address before applying Unicode normalization. An address can contain a Unicode character such as...