EUVD-2026-75411

Capgo Cap-go/capgo.app contains an authentication bypass affecting all versions no patched version available at time of publication. The Edge authorization path allows a password-only Supabase aal1 session to exercise privileged RBAC permissions even when the account has a verified MFA factor tha...

CVE-2026-88861

Capgo (Cap-go/capgo.app), a continuous deployment platform, has an authentication bypass in all versions with no patched release available. The root cause is in the Edge authorization path: the JWT middleware (findJWT() in hono_middleware.ts) accepts tokens without validating their assurance leve...

PT-2026-89372

Capgo Cap-go/capgo.app contains an authentication bypass affecting all versions no patched version available at time of publication. The Edge authorization path allows a password-only Supabase aal1 session to exercise privileged RBAC permissions even when the account has a verified MFA factor tha...

Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA

Cybercriminals are hijacking artificial intelligence AI user accounts via information stealer logs to create "stolen keys" that grant illicit access to tools from model providers like Google, Anthropic, and others. Information stealers like Lumma Stealer or Vidar are equipped to harvest a wide...

CVE-2024-10924-PoC

PoC Обход аутентификации MFA Really Simple Security WordPress Plugin | CVE-2024-10924 Переходим на веб-страницу WordPress, где увидим, что MFA активирован через уязвимый плагин: Мы должны выполнить PoC и предоставить данные для входа: Автоматически откроется браузер через временный .html файл в...

CVE-2026-73313

CVE-2026-73313 XenForo 2.3.13 より前のバージョンでは、別のユーザーが所有するパスキーを使用して、あるユーザーの2段階ログインを完了させることができます。 何が起こるか パスキーマネージャーは、アサーションで提供された認証情報IDを使用してグローバル検索を実行し、その認証情報のWebAuthn署名が正しいことを検証します。その後、TFAプロバイダーは、認証情報の所有者がパスワードログインが保留中のユーザーと一致するかどうかを確認せずに、結果をブール値に変換します。...

CVE-2026-78629

The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response contains only a bare boolean validation indicator with no cryptographic artifact, resulting in an unverifiable authentication...

CVE-2026-78631 Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging

The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access t...

CVE-2026-78631

Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This improper restriction of sensitive information makes a live authentication credential readable by any local user with access to that log ...

EUVD-2026-74183

The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access t...

CVE-2026-78629

The Okta Hyperdrive agent plugin contains an improper authentication verification flaw in its MFA response handling. When an organization's policy does not require MFA for a given user, the plugin returns a success response that contains only a bare boolean validation indicator rather than a sign...

CVE-2026-78629 Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling

The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response contains only a bare boolean validation indicator with no cryptographic artifact, resulting in an unverifiable authentication...

CVE-2026-73313

XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential during the WebAuthn assertion step. The passkey verification...

CVE-2026-73313

XenForo versions before 2.3.13 contain an MFA bypass vulnerability in the passkey TFA provider . During the WebAuthn assertion step, the passkey verification path performs a global credential lookup without validating that the matched credential belongs to the user whose login is pending. This al...

CVE-2026-73313 XenForo < 2.3.13 MFA Bypass via Passkey TFA Provider

XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential during the WebAuthn assertion step. The passkey verification...

EUVD-2026-72784

XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential during the WebAuthn assertion step. The passkey verification...

CVE-2026-48558

CVE-2026-48558: SimpleHelp OIDC 認証バイパス !WARNING このコードは教育的および研究目的のみで「現状のまま AS IS」提供されます。 本PoCを本番環境、共有環境、または許可のない対象に対して使用しないでください。 このエクスプロイトは、Chromeレンダラーのサンドボックスを完全に侵害できる重大なリモートコード実行 RCE の脆弱性 CVE-2026-6307 を実証します。 このコードを実行またはホストすると、ウイルス対策による検出、セキュリティ監視アラート、または悪用された場合の法的結果が生じる可能性があります。...

joombrute

JoomBrute モダンなJoomla認証攻撃ツールキット J3 / J4 / J5 - CVE-2023-23752 · CVE-2023-23755 · CVE-2025-25227 説明 Joomla CMSバージョン3、4、5をカバーする認証情報攻撃ツールキット。6つのサブコマンドが攻撃チェーン全体をエンドツーエンドで処理します： detect - バージョンフィンガープリント（マニフェストXML → generatorメタ → 管理画面マークアップ） enum - CVE-2023-23752...

CVE-2025-3639

CVE-2025-3639 PoC - Обход аутентификации Liferay Portal/DXP Этот репозиторий содержит Proof of Concept PoC для CVE-2025-3639 — уязвимости обхода аутентификации в Liferay Portal версии 7.3.0–7.4.3.132 и Liferay DXP различные версии от 2024.Q1 до 2025.Q1.6. PoC демонстрирует, как...

CitrixBleedCVE-2026-8452-2025-5777

CitrixBleed 익스플로잇 도구 - CVE-2025-5777 & CVE-2026-8452. Citrix NetScaler ADC 및 Gateway에서 인증 없이 원격 메모리 읽기. 관리자 세션 토큰 탈취, nsroot 해시 추출, 비밀번호 덤프, MFA 우회. 전체 메모리 파싱을 지원하는 Python 3 익스플로잇. https://satoshi-box.com/pay/CSHeT8...