CVE-2024-41958-PoC

CVE-2024-41958-PoC これは CVE-2024-41958 の小さな概念実証です。 管理パネルでTFA認証をバイパスすることが可能です。 影響を受けるバージョン: 2024-07 このCVEを機能させるために必要な前提条件: TFAなしのアカウントのPasswordとusername。 TFAが有効なアカウントのPasswordとusername。 2024-07より前のMailcowバージョン。 PoCの使用方法: 1. 依存関係をインストールします root@kitploit: pip install -r requirements.txt 2...

CVE-2026-41940-Detection

CVE-2026-41940 検出 cPanel/WHM 認証バイパス（CVE-2026-41940）の検出ルールとログスキーマ（Unfold Security 提供）。 ブログ記事: cPanel Exploit — CVE-2026-41940 構成 root@kitploit: ├── cpanelcve202641940malget.yml SIGMA ルール — CRLF インジェクションリクエストを検出 ├── cpanelsessionmalauthorization.yml SIGMA ルール — 事前ログインなしのセッション使用を検出 ├── Schemas/ │ ├─...

CVE-2026-85056

The identity management platform ZITADEL is vulnerable to an MFA bypass in Login V2 (versions 4.0.0 through 4.16.1). The root cause is that the system creates a browser session after password verification and allows it to be reused for subsequent requests without verifying enrolled TOTP, OTP, or ...

CVE-2026-85056 ZITADEL: MFA bypass via session reuse in Login V2

ZITADEL is an open source identity management platform. From 4.0.0 until 4.16.1, ZITADEL Login V2 creates a browser session after password verification and can reuse that session for a later authentication request without verifying a user's enrolled TOTP, OTP, or U2F second factor. When the MFA...

CVE-2026-77268

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the OAuth fallback token directory and JSON file are created without explicit owner-only modes. Local users or processes with access through the resulting group or world permission bi...

CVE-2026-77268

The MCP Atlassian Model Context Protocol server for Confluence and Jira is vulnerable to insecure file permissions in versions prior to 0.22.0 . The application creates the OAuth fallback token directory and JSON file without explicit owner-only modes. This allows local users or processes with gr...

EUVD-2026-84757

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the OAuth fallback token directory and JSON file are created without explicit owner-only modes. Local users or processes with access through the resulting group or world permission bi...

fortinet-cve-2024-50562

Fortinet SSL-VPN セッション再利用の脆弱性 CVE-2024-50562 プロフェッショナル向け・許可を得た場合のみ使用するスキャナー 。FortiGate がログアウト後にセッション Cookie を無効化するかどうかを検証します。 陽性の結果は CVE-2024-50562 、すなわち セッション期限切れの不備 CWE-613 を確認するもので、攻撃者が盗んだ Cookie を再生し、ユーザーが明示的にログアウトした後でも再ログインできることを示します。 公式アドバイザリ: https://fortiguard.com/psirt/FG-IR-24-339 0 |...

CVE-2025-23419

🔐 TLS Session Reuse Exploit Tester $ BY XIT TLSセッション再利用の脆弱性をテストするためのPythonベースのツールです。設定ミスのあるサーバーで認証バイパスを引き起こす可能性があります。 ⚠️ 免責事項 このツールは教育目的および許可を得たセキュリティテスト専用 です。 適切な許可なくシステムで使用しないでください。 📌 説明 このスクリプトは、TLSセッション再利用シナリオのシミュレーションを試みます： 1. クライアント証明書認証を要求する サーバーに接続します 2. TLSセッションを確立します 3...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: smb: client: fixed the issue where krb5 mounts failed when the client tried to mount shares with incorrect credentials. It turned out that the client was reusing the SMB session from the first mount attempt, even though a differe...

Astra Linux – Vulnerability in liblivemedia

Live555 before 2019.08.16 has a Use-After-Free issue, as GenericMediaServer::createNewClientSessionWithId can generate the same client session ID consecutively. This issue is handled improperly by the MPEG1or2 and Matroska file demultiplexors...

CVE-2026-46355

BigBlueButton prior to 3.0.23 exposed the /bigbluebutton/api/handleJoinExistingUser endpoint through a routable controller action in ApiController.groovy rather than a private helper. An authenticated requester who could supply the existingUserID of an active participant was able to reuse that pa...

PT-2026-78908

An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associated with stolen, leaked, shared, or unattended sessions and may enable unauthorized continued access to the FDS web...

CVE-2026-46355: Improper Authentication

BigBlueButton is an open-source virtual classroom. Prior to 3.0.23, BigBlueButton exposed /bigbluebutton/api/handleJoinExistingUser through bigbluebutton-web/grails-app/controllers/org/bigbluebutton/web/controllers/ApiController.groovy. A requester able to supply an existingUserID for an active...

K000162984: Node.js vulnerabilities CVE-2026-58039 and CVE-2026-58040

Security Advisory Description CVE-2026-58039 A flaw in Node.js Permission Model enforcement allows process.report writes and overwrites files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This...

BIT-NODE-MIN-2026-58040

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...

BIT-NODE-2026-58040

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies incomplete fix of CVE-2026-48934. This vulnerability affects Node.js 22.x, 24.x, and 26.x...

CVE-2026-70606

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 40.10.6, 41.9.1, 42.5.1, and 43.0.0, when a custom protocol handler returned a ProtocolResponse with a url and no session, Electron made the upstream request through defaultSession...

EUVD-2026-53445

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 40.10.6, 41.9.1, 42.5.1, and 43.0.0, when a custom protocol handler returned a ProtocolResponse with a url and no session, Electron made the upstream request through defaultSession...

CVE-2026-58040

A flaw was found in Node.js. An incomplete fix for a previous vulnerability allows the HTTPS Agent to reuse Transport Layer Security TLS sessions, bypassing hostname verification across different identity policies. This could enable an attacker to impersonate a legitimate server, leading to...