Vulnerabilities
Omnispace Agora Project Authentication Bypass Allows Hash Replay Attacks
A critical flaw in Omnispace Agora Project before version 26.10.0 lets attackers use stolen bcrypt hashes to bypass login and impersonate users.
Agora Project
Everything Threat Times has reported about Agora Project: 5 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Omnispace Agora Project Vulnerability Allows Account Takeover via Predictable Tokens
A critical flaw in Omnispace Agora Project before version 26.10.0 allows unauthenticated attackers to hijack accounts by computing predictable password-reset tokens.
Vulnerabilities
Omnispace Agora Project Critical Flaw Exposes Plaintext Auth Tokens
A critical vulnerability in Omnispace Agora Project allows attackers to hijack accounts by accessing stored remember-me tokens before version 26.10.0.
Vulnerabilities
Agora Project Flaw Allows Unauthenticated Remote Code Execution Before Version 26.10.0
A critical code injection vulnerability in Omnispace Agora Project enables unauthenticated attackers to execute arbitrary PHP code on the server.
Vulnerabilities
Omnispace Agora Project Has Critical Password Prediction Flaw Before 26.10.0
A critical vulnerability in Omnispace Agora Project allows attackers to predict default account passwords, enabling unauthorized access prior to legitimate user login.