Elektrine
Log in Register

#oauth2

4 posts · Last used 11d

Back to Timeline
DailyCyberSecurity
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange · Jul 15, 2026
Two critical RabbitMQ flaws allow authentication bypass. One forges TLS client certs; the other tricks OAuth2 JWKS to accept any JWT. #RabbitMQ #AuthBypass #TLS #OAuth2 #InfoSec https://securityonline.info/rabbitmq-authentication-bypass-flaws/?utm_source=mastodon&utm_medium=jetpack_social
0
0
0
offseq
OffSequence @offseq@infosec.exchange · Jul 14, 2026
SAP Commerce Cloud impacted by CRITICAL CVE-2026-44761 (CVSS 9.1): Default OAuth2 credentials can let unauthenticated attackers access APIs & modify data. Change/remove sample creds now. No patch yet. https://radar.offseq.com/threat/cve-2026-44761-cwe-1392-use-of-default-credentials-009b0a23096bbf37 #OffSeq #SAP #OAuth2 #Vuln
0
0
0
darkpixel
He Who Remains @darkpixel@infosec.exchange · Jul 12, 2026
Fun setting up OAuth2 for my local @forgejo@floss.social with no hassle. cc: @jerry@infosec.exchange #OAuth2 #Forgejo
0
0
0

You've seen all posts