Vulnerabilities
Omnispace Agora Project Authentication Bypass Allows Hash Replay Attacks
A critical flaw in Omnispace Agora Project before version 26.10.0 lets attackers use stolen bcrypt hashes to bypass login and impersonate users.
Omnispace
Everything Threat Times has reported about Omnispace: 5 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Omnispace Agora Project Vulnerability Allows Account Takeover via Predictable Tokens
A critical flaw in Omnispace Agora Project before version 26.10.0 allows unauthenticated attackers to hijack accounts by computing predictable password-reset tokens.
Vulnerabilities
Omnispace Agora Project Critical Flaw Exposes Plaintext Auth Tokens
A critical vulnerability in Omnispace Agora Project allows attackers to hijack accounts by accessing stored remember-me tokens before version 26.10.0.
Vulnerabilities
Agora Project Flaw Allows Unauthenticated Remote Code Execution Before Version 26.10.0
A critical code injection vulnerability in Omnispace Agora Project enables unauthenticated attackers to execute arbitrary PHP code on the server.
Vulnerabilities
Omnispace Agora Project Has Critical Password Prediction Flaw Before 26.10.0
A critical vulnerability in Omnispace Agora Project allows attackers to predict default account passwords, enabling unauthorized access prior to legitimate user login.