Snipe-IT: 2FA bypass via the API token flow

Impact An attacker who knows a victim's password fully bypasses that account's 2FA and obtains a persistent token with full API access as the user read and write across the user's permissions, including admin if the victim is an admin. The token is an API credential, not a web/UI session using it...

CVE-2026-63493

Prior to version 8.7.0 , Snipe-IT is vulnerable to a 2FA bypass due to inconsistent middleware enforcement. While the web middleware group enforces CheckForTwoFactor, the API middleware group does not. An attacker with a password-authenticated session and self.api permissions can access the perso...

EUVD-2026-86291

Snipe-IT is an IT asset/license management system. Prior to 8.7.0, a password-authenticated session for an account with self.api permission can reach the personal-access-token API flow before completing the account's second-factor challenge because CheckForTwoFactor is enforced in the web...

evilginx

Evilginx v.1.1.0 ESTA VERSIÓN ESTÁ OBSOLETA. ¡USE LA VERSIÓN MÁS RECIENTE! EVILGINX 2:https://github.com/kgretzky/evilginx2 Evilginx es un framework de ataque man-in-the-middle utilizado para suplantar credenciales y cookies de sesión de cualquier servicio web. Su núcleo se ejecuta en el servidor...

research

Research — Bertoldi Cybersecurity Published security research by Alessandro Bertoldi and collaborators. Papers Title| Event| Year| Link ---|---|---|--- Infinity-Day at Scale: Hijacking Registrars, Defeating 2FA and Spoofing 17,000+ Domains| DeepSec Vienna 2025| 2025| PDF Authors Infinity-Day at...

SMSOTPBOT

ghost-OTPBOT ghost-OTPBOT es el bot de captura de OTP y SMS más avanzado y versátil, capaz de obtener códigos OTP y SMS de las víctimas haciéndose pasar por una empresa o banco. Puedes usarlo para obtener OTP para inicios de sesión, bancos, tarjetas de crédito, Apple Pay y más. Únete a...

Modlishka

..Modlishka.. Modlishka 是一款开源渗透测试工具，可作为中间人代理使用。它引入了一种处理基于浏览器的 HTTP 流量流的新技术方法，使得能够透明地将多域目标流量（包括 TLS 和非 TLS）代理到单个域上，而无需在客户端安装任何额外的证书。 2019 年，Modlishka 是首个公开发布的研究工具，展示了一种新颖的中间人攻击者（AitM）技术，能够绕过许多常见的双因素认证（2FA）实现——旨在提高业界认知并改善现实防御。 说明： 本项目严格仅用于授权的研究和专业安全测试。 使用场景 安全测试： 使用透明、自动的反向代理和通用 2FA 绕过支持进行道德钓鱼渗透测试 ...

EvilnoVNC

EvilnoVNC EvilnoVNC is a Ready to go Phishing Platform. Unlike other phishing techniques, EvilnoVNC allows 2FA bypassing by using a real browser over a noVNC connection. In addition, this tool allows us to see in real time all of the victim's actions, access to their downloaded files and the enti...

wordpress-cve-2024-10924-exploit

WordPress CVE-2024-10924 Exploit 📌 Resumen Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2024-10924, una vulnerabilidad en el plugin de WordPress Really Simple SSL que permite omitir la autenticación de dos factores 2FA. Los atacantes pueden explotar esta falla para...

wordpress-cve-2024-10924-pentest

WordPress CVE-2024-10924 Informe de Pruebas de Penetración Vulnerabilidad de Bypass de 2FA en el Plugin Really Simple SSL 📋 Tabla de Contenidos Resumen Ejecutivo Información del Objetivo Metodología Cronología Fase de Reconocimiento Análisis de Vulnerabilidades Flujo de Ataque Explotación...

CVE-2022-28601

CVE-2022-28601 Una vulnerabilidad de omisión de la autenticación de dos factores 2FA en el complemento "Simple 2FA Plugin for Moodle" de LMS Doctor Detalles de la vulnerabilidad Riesgo : Medio Vendor: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Divulgado por: Flaviu Popescu...

0-click-RCE-Exploit-for-CVE-2024-10924

CVE-2024-10924 / Bypass de autenticación 2FA a RCE Autor: Joshua Provoste https://x.com/JoshuaProvoste/status/1859061671852909055 Este repositorio contiene un exploit de prueba de concepto para CVE-2024-10924, una vulnerabilidad de bypass de autenticación y 2FA en el plugin de WordPress Really...

Session-Persistence-After-Enabling-2FA-CVE-2025-60425

Persistencia de sesión después de habilitar 2FA Resumen La aplicación Nagios Fusion versiones 2024R1.2 y 2024R2 contiene una falla de seguridad alta donde las sesiones existentes siguen siendo válidas incluso después de habilitar la Autenticación de Dos Factores 2FA. Específicamente, cuando se...

EUVD-2026-84115

Sync-in Server has a complete 2FA Bypass via POST /api/auth/token...

Sync-in Server has a complete 2FA Bypass via `POST /api/auth/token`

Affected component: Sync-in Server v2.3.0, POST /api/auth/token auth.controller.ts:50-55. Required attacker capability: Valid username and password for a 2FA-enabled account. Summary POST /api/auth/token authenticates with username and password only, then calls getTokens, which returns unrestrict...

GHSA-HF33-Q6CF-C66F nginx ignition has TOTP Reuse During Validity Window

Summary Any user that has enabled the OTP 2FA can have their TOTP reused during the standard 30 second validity window. Details The https://github.com/pquerna/otp package doesn't include checking for already used TOTPs within its the validity window. This requires each application that uses the...

CVE-2026-58269

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, POST /api/auth/token authenticates with username and password only, then calls getTokens, which returns full access and refresh JWTs without checking whether the account has TO...

CVE-2026-58269 Sync-in Server has a complete 2FA Bypass via `POST /api/auth/token`

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, POST /api/auth/token authenticates with username and password only, then calls getTokens, which returns full access and refresh JWTs without checking whether the account has TO...

CVE-2026-58269

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0 , the POST /api/auth/token endpoint authenticates users with only username and password, then calls getTokens(), which returns full access and refresh JWTs without checking whet...

CVE-2026-58269 Sync-in Server has a complete 2FA Bypass via `POST /api/auth/token`

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, POST /api/auth/token authenticates with username and password only, then calls getTokens, which returns full access and refresh JWTs without checking whether the account has TO...