tanstack-shield

🛡️ tanstack-shield Однокомандный сканер атак на цепочку поставок для CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx Обнаруживает червя «Mini Shai-Hulud», который скомпрометировал 42 пакета @tanstack/ npm 84 вредоносные версии 11 мая 2026 года. root@kitploit: One line — scan your project curl -fsSL...

cve-2026-41200-stig-manager-oidc-reflected-xss

CVE-2026-41200 — STIG Manager OIDC Отражённая XSS PoC Концептуальное доказательство уязвимости отражённого межсайтового скриптинга XSS в STIG Manager версий 1.5.10 – 1.6.7. Сводка уязвимости Уязвимость отражённого XSS существует в коде обработки ошибок аутентификации OIDC веб-приложения STIG...

CVE-2026-35030-PoC

CVE-2026-35030 — LiteLLM OIDC 사용자 정보 캐시 키 충돌을 통한 인증 우회 LiteLLM OIDC 사용자 정보 캐시는 token:20을 캐시 키로 사용합니다. 동일한 알고리즘으로 서명된 서로 다른 두 JWT는 처음 20자가 동일 하여, 인증되지 않은 공격자가 다른 사용자의 캐시된 신원 및 권한을 상속할 수 있습니다...

ash-authentication-oauth2-oidc-account-takeover-cve-2026-49757-email-based-user-matching

CVE-2026-49757 — AshAuthentication OAuth2/OIDC 계정 탈취 CVE-2026-49757 에 대한 개념 증명 — AshAuthentication의 심각한 취약점으로, OAuth2/OIDC 콜백이 strategy, sub 식별자 쌍 대신 이메일 주소 로 로컬 사용자 계정을 확인하여 인증되지 않은 계정 탈취를 허용합니다. Field| Value ---|--- CVE| CVE-2026-49757 CVSS 4.0| 9.2 심각 CWE| CWE-290 스푸핑을 통한 인증 우회 GHSA|...

CVE-2026-86516

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege...

CVE-2026-86516 elenavanengelenmaslova mocknest-serverless AWS GitHub OIDC Deployment Helper Script github-oidc-role.yaml privileges management

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege...

CVE-2026-86516 elenavanengelenmaslova mocknest-serverless AWS GitHub OIDC Deployment Helper Script github-oidc-role.yaml privileges management

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege...

EUVD-2026-72639

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege...

CVE-2026-86516

mocknest-serverless 0.9.0 contains an improper privilege management flaw in the file deployment/aws/shared/github-oidc-role.yaml, part of the AWS GitHub OIDC Deployment Helper Script . The vulnerability is remotely exploitable but requires high privileges (e.g., an authenticated user with elevate...

PT-2026-88500

Impact The public OIDC login and callback endpoints ran the full flow whether or not OIDC was the instance's active, enabled authentication method, so turning OIDC off in Settings did not stop it issuing sessions. An administrator who disabled the provider still had a working login route. The pat...

CVE-2026-48558

CVE-2026-48558: SimpleHelp OIDC 認証バイパス !WARNING このコードは教育的および研究目的のみで「現状のまま AS IS」提供されます。 本PoCを本番環境、共有環境、または許可のない対象に対して使用しないでください。 このエクスプロイトは、Chromeレンダラーのサンドボックスを完全に侵害できる重大なリモートコード実行 RCE の脆弱性 CVE-2026-6307 を実証します。 このコードを実行またはホストすると、ウイルス対策による検出、セキュリティ監視アラート、または悪用された場合の法的結果が生じる可能性があります。...

CVE-2026-47839 - Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin | Cloud Foundry

High CVSS score: 9.2 Critical CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS score: 9.0 Critical CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Vendor CloudFoundry Foundation Versions Affected Severity is Critical unless otherwise noted. UAA – All versions through v77.30.0...

CVE-2026-55512

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.2.0 to before version 0.5.0, when OIDC is enabled, GET /ui/oidc/login is reachable without authentication and is registered outside the Web UI rate-limited auth routes. Every request creates a fresh random OIDC...

CVE-2026-55512

nebula-mesh (self-hosted control plane for Slack Nebula mesh VPN) versions 0.2.0 through before 0.5.0 are vulnerable to uncontrolled resource consumption via the GET /ui/oidc/login endpoint. When OIDC is enabled, this route is registered outside the Web UI rate-limited auth group, so every unauth...

CVE-2026-55512 nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.2.0 to before version 0.5.0, when OIDC is enabled, GET /ui/oidc/login is reachable without authentication and is registered outside the Web UI rate-limited auth routes. Every request creates a fresh random OIDC...

CVE-2026-55512 nebula-mesh: Unauthenticated OIDC login endpoint allocates unbounded in-memory state entries without rate limiting

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.2.0 to before version 0.5.0, when OIDC is enabled, GET /ui/oidc/login is reachable without authentication and is registered outside the Web UI rate-limited auth routes. Every request creates a fresh random OIDC...

...[ More ]

This Metasploit module exploits CVE-2026-48558 to forge an OpenID Connect identity token and obtain a SimpleHelp technician session. It then uses SimpleHelps legitimate remote access WebSocket protocol to connect to an online managed machine and execute a payload through the remote terminal. An...

CVE-2026-61641

Wallos is an open-source, self-hostable personal subscription tracker. From version 4.0.0 to before version 4.9.6, Wallos's OIDC login links an incoming OIDC identity to an existing local account by matching the email claim alone, without verifying that the IdP marked that email as verified...

CVE-2026-61640

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.6, Admin-configured OIDC tokenurl and userinfourl in includes/oidc/handleoidccallback.php:18-49 are used directly in curlinit with zero SSRF filtering. Unlike logo/webhook URLs which have...

CVE-2026-54599

Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 4.9.4, login.php generates an OIDC state nonce stored in $SESSION'oidcstate', but checksession.php dispatches the OIDC callback without comparing the incoming state against the session value. An attacker can...