PT-2026-59209

Summary An open redirect vulnerability in the account confirmation endpoint allows an unauthenticated attacker to craft a URL hosted on a legitimate Kiwi TCMS instance that redirects victims to an arbitrary external domain. The attack surface is particularly relevant for phishing campaigns...

PT-2026-56061

Name of the Vulnerable Software and Affected Versions Kiwi TCMS affected versions not specified Description An open redirect issue exists in the account confirmation endpoint, allowing an unauthenticated attacker to create a URL on a legitimate instance that redirects users to an arbitrary extern...

K000149845: pam_access vulnerability CVE-2024-10963

Security Advisory Description A flaw was found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for...