CVE-2025-23040

CVE-2025-23040 - Fuite d'identifiants dans GitHub Desktop GitHub Desktop 3.4.12 est vulnérable à une attaque permettant d'exfiltrer des identifiants via des URL distantes malveillantes. Un attaquant peut convaincre un utilisateur de cloner un dépôt manipulé pour obtenir des noms d'utilisateur et...

EasyTokens

EasyTokens Un serveur de phishing par code d'appareil pour l'émulation d'adversaires. Capture les jetons OAuth Microsoft 365 via le flux Device Authorization Grant. Inspiré par GraphSpy. Avertissement — Utilisation autorisée uniquement. Cet outil est destiné aux testeurs d'intrusion et aux red...

trust-boundary-ctf

🐘 信任边界：MCP 会话隔离 CTF 控制台显示 会话活跃 。 每次工具调用都成功。 管理员的 OAuth 令牌出现在每个响应中。 Trust Boundary 是一个基于浏览器的 CTF 实验室，围绕本地运行的 MCP 服务器中真实的会话隔离缺陷而构建。该漏洞并非模拟——它会在运行进程中真实执行。三个 Flag。仅需 DevTools。 攻击 一个共享的可变上下文对象。管理员凭据在启动时设置。用户请求会部分覆盖它——但绝不会清除真正关键的内容。 root@kitploit: flowchart LR subgraph startup"🚀 Server Startup" AAdmin...

cs50-cyber-paloalto-oauth

Projet final de cybersécurité CS50 Titre : La brèche OAuth de Salesloft et CVE-2024-3400 impact Palo Alto Auteur : Yafiya Darwesh GitHub: Yafiah-Darwesh Vidéo YouTube : https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE : CVE-2024-3400 Fichiers presentation.pdf — diapositives script.txt — notes...

CVE-2026-78905-Facebook-Account-Takeover

CVE-2026-78905 — メタフィッシング Facebook Graph API — OAuthトークンの再利用とセッションハイジャック...

WordPress WP OAuth Server ( Login with WordPress ) plugin < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure vulnerability

Unauthenticated OAuth Token and User Data Disclosure vulnerability discovered by Farid Narimanov in WordPress Plugin WP OAuth Server versions 6.3.1...

EUVD-2026-63467

WebOb: Open redirect in Location header normalization via leading C0 control / space characters...

CVE-2026-19715

The WP OAuth Server (Login with WordPress) WordPress plugin, in versions before 6.3.1 , fails to restrict access to its debug log file , which is written to a fixed and publicly reachable location. When debug logging is enabled, unauthenticated attackers can read OAuth tokens , authorization code...

CVE-2026-19715 WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure via Debug Log File

The WP OAuth Server Login with WordPress WordPress plugin before 6.3.1 does not restrict access to the debug log it writes, which is stored at a fixed and publicly reachable location, allowing unauthenticated users to read the OAuth tokens and authorisation codes it has issued as well as user...

CVE-2026-75542

Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private packages. When an API key is exchanged for a token through the OAuth clientcredentials grant, validatescopesagainstkey/2 in...

CVE-2026-75554 Explicit organization scopes survive token refresh after membership ends

Insufficient Session Expiration vulnerability in the OAuth token refresh grant in hexpm hexpm allows a user removed from an organization to keep reading its private packages. expandrepositoriesscope/3 in lib/hexpm/permissions.ex only rewrites the literal repositories scope, so an explicitly grant...

CVE-2026-75542 OAuth token exchange grants repository scopes for organizations the principal cannot access

Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private packages. When an API key is exchanged for a token through the OAuth clientcredentials grant, validatescopesagainstkey/2 in...

CVE-2026-75542 OAuth token exchange grants repository scopes for organizations the principal cannot access

Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private packages. When an API key is exchanged for a token through the OAuth clientcredentials grant, validatescopesagainstkey/2 in...

CVE-2026-75542

CVE-2026-75542 is an Incorrect Authorization flaw in the OAuth token endpoint of hex.pm (the Erlang/BEAM package registry). When an API key holding the repositories permission is exchanged for a token via the client_credentials grant, the function validate_scopes_against_key/2 in lib/hexpm_web/co...

EEF-CVE-2026-75542 OAuth token exchange grants repository scopes for organizations the principal cannot access

Summary Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private packages. When an API key is exchanged for a token through the OAuth client\credentials grant,...

Linux Distros Unpatched Vulnerability : CVE-2026-54770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebOb provides objects for HTTP requests and responses. Prior to 1.8.11, Response.makelocationabsolute in src/webob/response.py checks a Location value for a UR...

CVE-2026-54770

WebOb provides objects for HTTP requests and responses. Prior to 1.8.11, Response.makelocationabsolute in src/webob/response.py checks a Location value for a URI scheme or leading double slash before urllib.parse.urljoin strips leading C0 control characters and spaces. An attacker-controlled valu...

DEBIAN-CVE-2026-54770

WebOb provides objects for HTTP requests and responses. Prior to 1.8.11, Response.makelocationabsolute in src/webob/response.py checks a Location value for a URI scheme or leading double slash before urllib.parse.urljoin strips leading C0 control characters and spaces. An attacker-controlled valu...

CVE-2026-54770

In WebOb before 1.8.11, Response._make_location_absolute() in src/webob/response.py checks a Location value for a URI scheme or leading double slash before urllib.parse.urljoin() strips leading C0 control characters and spaces. An attacker-controlled value such as a space followed by a protocol-r...

Mattermost Server 10.11.x < 10.11.22 / 11.7.x < 11.7.7 Multiple Vulnerabilities (MMSA-2026-00672, MMSA-2026-00675, MMSA-2026-00704)

The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities as referenced in the MMSA-2026-00672, MMSA-2026-00675, MMSA-2026-00704 advisories. - Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21 fail to prevent guest users from receiving Board Admin...