Lucene search
+L

483 matches found

EUVD
EUVD
added 2026/09/23 12:31 a.m.8 views

EUVD-2026-84951

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an application uses the SDK to authenticate to two or more different audiences within the same process, the module-level token cache...

9.1CVSS5.8AI score0.00228EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/22 10:17 p.m.14 views

CVE-2026-19202

A caching flaw in the toolbox-core package of the mcp-toolbox-sdk-python SDK causes the same Google ID token to be cached and reused across different audiences. If an application uses the SDK to authenticate to two or more different audiences within the same process, the module-level token cache...

9.1CVSS0.00228EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/22 1:37 p.m.10 views

CVE-2026-73311

CVE-2026-73311: OAuth2 authorization code replay XenForo before 2.3.13 allows an OAuth2 authorization code to be redeemed more than once. What happens The authorization-code grant loads a code, verifies its time-based validity, and creates a token pair. The successful path does not delete the cod...

9.1CVSS6.1AI score0.0037EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/22 3:43 a.m.8 views

CVE-2026-73312

CVE-2026-73312: Refresh token replay after access-token expiry XenForo before 2.3.13 can leave an OAuth2 refresh token reusable when its parent access token has expired. What happens XenForo intentionally lets a refresh token outlive its short-lived access token. During rotation it creates the...

9.1CVSS6.2AI score0.00353EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/21 12:18 p.m.10 views

FOSKiller

root@kitploit: ███████╗ ██████╗ ███████╗██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██╔════╝██╔═══██╗██╔════╝██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ █████╗ ██║ ██║███████╗█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██╔══╝ ██║ ██║╚════██║██╔═██╗ ██║██║ ██║ ██╔══╝ ██╔══██╗ ██║ ╚██████╔╝███████║██║...

7.7CVSS6AI score0.00543EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/20 6:28 a.m.8 views

CVE-2026-78905-Facebook-Account-Takeover

CVE-2026-78905 — Meta-Phishing Facebook Graph API — Reutilización de Tokens OAuth y Secuestro de Sesión...

6AI score0.00475EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/19 8:36 a.m.9 views

CVE-2025-56643

CVE-2025-56643 Referencia pública para CVE-2025-56643 – Vulnerabilidad de sesión JWT en Wiki.js 2.5.307 Descripción: Requarks Wiki.js 2.5.307 no revoca ni invalida adecuadamente los tokens JWT activos cuando un usuario cierra sesión. Como resultado, los tokens emitidos previamente siguen siendo...

8.4AI score0.00359EPSS
SaveExploits0
OSV
OSV
added 2026/09/19 12:38 a.m.7 views

CLEANSTART-2026-PZ14685 Vault and Vault Enterprise’s (“Vault”) login MFA rate limits could be bypassed and TOTP tokens could be reused

Security vulnerability affects the vault package. Vault and Vault Enterprise’s “Vault” login MFA rate limits could be bypassed and TOTP tokens could be reused...

9.8CVSS6.1AI score0.0033EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/18 7:49 a.m.13 views

CVE-2020-24030

CVE-2020-24030 Descripción ForLogic Qualiex v1 y v3 tiene una expiración de token débil. Esto permite la escalada de privilegios remota no autenticada y el acceso a datos sensibles mediante la reutilización de tokens. Fechas importantes Anuncio al proveedor: 2020-07-12 Fecha de divulgación públic...

9.8CVSS8.4AI score0.02667EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/17 10:17 a.m.11 views

CVE-2026-78426

The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of NeuVector, can continue using the non-expired token with equivalent spelling of the RSA signature field until the token...

3.7CVSS0.00116EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/17 9:28 a.m.18 views

CVE-2026-78426

NeuVector 's JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid, non-expired JWT that was already used to log out of NeuVector can continue using the token by altering the spelling of the signature field, bypassing the logout mechani...

3.7CVSS5.8AI score0.00116EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/17 9:28 a.m.8 views

EUVD-2026-81414

The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of NeuVector, can continue using the non-expired token with equivalent spelling of the RSA signature field until the token...

3.7CVSS5.8AI score0.00116EPSS
SaveExploits0References2
OSV
OSV
added 2026/09/17 9:28 a.m.6 views

CVE-2026-78426 Logout bypass via alternate JWT spelling

The NeuVector JWT verifier accepts noncanonical Base64URL encodings of the same RSA signature field. An attacker holding a valid JWT that has not expired, but was logged out of NeuVector, can continue using the non-expired token with equivalent spelling of the RSA signature field until the token...

3.7CVSS5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 12:25 p.m.11 views

CVE-2026-24858-FortiCloud-SSO-Authentication-Bypass

CVE-2026-24858 | Bypass de Autenticación SSO de FortiCloud Resumen Ejecutivo FortiCloud Single-Sign-On SSO, una función habilitada por defecto de fábrica una vez que registras cualquier FortiGate/FortiManager/FortiAnalyzer, contiene una vulnerabilidad crítica de bypass de autenticación. Un atacan...

9.8CVSS7.8AI score0.86088EPSS
SaveExploits0
NVD
NVD
added 2026/09/16 6:16 a.m.12 views

CVE-2026-77702

The Eventin WordPress plugin before 4.1.24 does not prevent the token issued to a guest at checkout from being used to change that order's tickets afterwards, allowing unauthenticated users to replace a paid ticket with a free one and complete the order at no charge...

5.3CVSS0.00291EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/16 6:00 a.m.8 views

EUVD-2026-80184

The Eventin WordPress plugin before 4.1.24 does not prevent the token issued to a guest at checkout from being used to change that order's tickets afterwards, allowing unauthenticated users to replace a paid ticket with a free one and complete the order at no charge...

5.8AI score0.00291EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/15 9:16 p.m.9 views

CVE-2026-18426

Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control-management actions, which relied solely on CSRF token validation. Because the token is bound to the user and action rather than to a specific block, page, or form, an...

6.5CVSS0.00206EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/15 8:16 p.m.6 views

EUVD-2026-79942

Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control-management actions, which relied solely on CSRF token validation. Because the token is bound to the user and action rather than to a specific block, page, or form, an...

2CVSS5.8AI score0.00206EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/15 7:06 p.m.7 views

CVE-2026-68530 Concrete CMS 9.0.0 through 9.5.2 is Missing Authorization on Board Instance Actions Allowed a Board Editor to Access and Delete Other Boards' Instances

Concrete CMS 9 through 9.5.2 did not perform an authorization check on several board-instance actions in the Boards area of the Dashboard. The instance details single-page controller resolved a board instance directly from an attacker-supplied instance ID and then viewed, refreshed, regenerated, ...

2.1CVSS5.6AI score0.00288EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/15 12:00 a.m.9 views

PT-2026-93112

Concrete CMS 9.0.0 through 9.5.2 did not enforce a block-level edit-permission check on the Express Form block's control-management actions, which relied solely on CSRF token validation. Because the token is bound to the user and action rather than to a specific block, page, or form, an...

2CVSS5.8AI score0.00206EPSS
SaveExploits0References2
Rows per page
Query Builder