191 matches found
cve-2026-103956-loom-unauth
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · cve-2026-103956-loom-unauth cve-2026-103956-loom-unauth Loom for AWS 1.6.1 - AWS Labs When Cognito is unset and no external IdP is active, getcurrentuser hands every request t-admin / g-admins-super. That includes...
ThunderCloud
ThunderCloud Cloud Exploit Framework Usage python3 tc.py -h | | | | | / | | | | | | | | | | | | | | | | | | | ' | | | | ' \ / |/ \ '| | | |/ | | | |/ | | | | | | | || | | | | | | / | | || | | || | | | / || ||,|| ||,||| ||/ ,|,| usage: tc.py -h -ce COGNITOENDPOINT -reg REGION -accid...
Strapi Versions <=4.5.6 - Authentication Bypass
Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that is signed using the 'None' type algorithm to bypass authentication and impersonate any user that...
aiohttp-ext-auth (>=0.1.1, <=0.1.2), ais-dom (>=0.76.5, <=0.91.5) +34 more potentially affected by CVE-2026-102269 via pyjwt (1.6.4)
pyjwt PYPI version 1.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - aiohttp-ext-auth =0.1.1, =0.76.5, =0.0.1, =0.0.1, =0.4.0, =1.0.0, =0.0.19, =0.5.0, =1.1.7, =0.31.0, =0.0.1, =0.0.2, =0.1.0 and more Source cves:...
django-admin-caching (>=0.1.0, <=0.1.2), django-cognito (1.1.11) +3 more potentially affected by CVE-2026-15307 via django (1.10.0)
django PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching =0.1.0, =2.0.0, =0.1.0, =0.3.1, =0.4.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...
django-admin-caching (>=0.1.0, <=0.1.2), django-cognito (1.1.11) +3 more potentially affected by CVE-2026-15307 via django (1.10.0)
django PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching =0.1.0, =2.0.0, =0.1.0, =0.3.1, =0.4.0 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...
boorunaut (>=0.1.0, <=0.4.1), coldfront (0.0.2) +10 more potentially affected by CVE-2026-15307 via django (2.1.2)
django PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - boorunaut =0.1.0, =0.31.0, =0.16.0, =1.0.0, =1.24.0, =1.0.0rc7, =1.0.0rc8 - warriorframework 4.2.0 Source cves: CVE-2026-15307 Source advisory:...
ICS344-DVSA-Project
DVSA Vulnerability Discovery and Remediation ICS-344: Infor...
Amazon Cognito Developer Authentication Sample - Detect
Detects Amazon Cognito Developer Authentication Sample - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Amazon Cognito Developer Authentication Sample - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...
PT-2026-60451
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified AWS Cognito affected versions not specified Microsoft Entra ID affected versions not specified Description One issue exists in the Linux kernel where the ECSPI is incorrectly configured when a DMA...
fastapi-cognito (>=2.5.0, <=2.7.0), fds-sdk-utils (2.0.0) +3 more potentially affected by CVE-2026-49852 via joserfc (0.9.0)
joserfc PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on joserfc and may be impacted: - fastapi-cognito =2.5.0, =0.1.3, =0.18.1, =0.1.0, =0.5.5 Source cves: CVE-2026-49852 Source advisory: OSV:PYSEC-2026-2528...
fastapi-cognito (>=2.5.0, <=2.7.0), fds-sdk-utils (2.0.0) +3 more potentially affected by CVE-2026-27932 via joserfc (0.9.0)
joserfc PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on joserfc and may be impacted: - fastapi-cognito =2.5.0, =0.1.3, =0.18.1, =0.1.0, =0.5.5 Source cves: CVE-2026-27932 Source advisory: OSV:PYSEC-2026-2529...
django-admin-caching (>=0.1.0, <=0.1.2), django-cognito (1.1.11) +3 more potentially affected by CVE-2026-53877 via django (1.10.0)
django PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching =0.1.0, =2.0.0, =0.1.0, =0.3.1, =0.4.0 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...
django-admin-caching (>=0.1.0, <=0.1.2), django-cognito (1.1.11) +3 more potentially affected by CVE-2026-53878 via django (1.10.0)
django PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching =0.1.0, =2.0.0, =0.1.0, =0.3.1, =0.4.0 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...
django-admin-caching (>=0.1.0, <=0.1.2), django-cognito (1.1.11) +3 more potentially affected by CVE-2026-48588 via django (1.10.0)
django PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching =0.1.0, =2.0.0, =0.1.0, =0.3.1, =0.4.0 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...
django-admin-caching (>=0.1.0, <=0.1.2), django-cognito (1.1.11) +3 more potentially affected by CVE-2024-45231 via django (1.10.0)
django PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-admin-caching =0.1.0, =2.0.0, =0.1.0, =0.3.1, =0.4.0 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...
fastapi-cognito (>=2.5.0, <=2.7.0), fds-sdk-utils (2.0.0) +3 more potentially affected by CVE-2026-49852 via joserfc (0.9.0)
joserfc PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on joserfc and may be impacted: - fastapi-cognito =2.5.0, =0.1.3, =0.18.1, =0.1.0, =0.5.5 Source cves: CVE-2026-49852 Source advisory: OSV:GHSA-GG9X-QCX2-XMRH...
GHSA-RM3J-F69W-WQMQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-orbital, crossplane-provider-keycloak, flux-image-automation-controller-fips, gomplate, knative-serving, prometheus-podman-exporter, steampipe, sops, packer, crossplane-provider-aws-sesv2, chainloop-control-plane,...
ariadne (>=0.15.0.dev4, <=0.15.0.dev5), ariadne-graphql-modules (>=0.2.0.dev1, <=0.2.0.dev2) +8 more potentially affected by CVE-2026-54282 via starlette (0.18.0)
starlette PYPI version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - ariadne =0.15.0.dev4, =0.2.0.dev1, =0.1.1, =1.0.0rc4, =1.4.1, =1.4.2 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...
