LEAKEY

LEAKEY 🔑 LEAKEY is a tool is for validation of leaked API tokens/keys found during pentesting and Red Team Enegagments. The script is really useful for Bug Hunters inorder to validate and determine the impact of leaked credentials. LEAKEY uses a json based signature file located at...

ownCloud Guests - User Enumeration

ownCloud Guests before 0.12.5 contains an unauthenticated user enumeration vulnerability caused by insufficient validation of the token in showPasswordForm at /apps/guests/register/email/token, letting unauthenticated attackers enumerate valid guest users, exploit requires no authentication. id:...

cs50-cyber-paloalto-oauth

CS50 사이버보안 기말 프로젝트 제목: Salesloft OAuth 침해 사고 및 CVE-2024-3400 Palo Alto 영향 저자: Yafiya Darwesh GitHub: Yafiah-Darwesh YouTube 동영상: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 파일 presentation.pdf — 슬라이드 script.txt — 발표자 노트 요약 간단히: 잘못 구성된 OAuth 토큰 검증으로 인해 토큰 위조 및 OAuth 통합 전반에 ...

CVE-2018-0114

CVE-2018-0114 Cisco의 node-joseJWT를 관리하기 위해 만들어진 JavaScript 라이브러리의 취약점 악용. 이 Cisco node-jose 취약점을 통해 공격자는 악의적인 토큰을 위조할 수 있습니다. JWT는 사용자가 토큰 헤더에 공개 키jwk 값 사용를 포함할 수 있도록 허용합니다. 그러나 애플리케이션은 이러한 키를 절대 신뢰해서는 안 됩니다. 공격자가 자신의 키를 제공하고 해당 개인 키로 메시지에 서명할 수 있기 때문입니다. 검토 이 문제는 0.11 이전 버전에 영향을 미칩니다. 이 문제를 해결하기...

CVE-2025-50433

CVE-2025-50433 — Critical Account Takeover Vulnerability Affecting Monnit Cloud Platforms .imonnit.com Summary A critical authentication vulnerability exists across .imonnit.com that allows full Account Takeover ATO on any user account without victim interaction. The backend fails to validate the...

CVE-2020-28874

이 저장소는 ProjectSend r1270 릴리스에서 발견된 취약점CVE-2020-28874에 대한 설명을 포함합니다. 저를 발전시키도록 독려해 준 Entelgy Innotec Security 동료들에게 감사드립니다! CVE-2020-28874: 권한 상승 설명 취약점은 비밀번호 재설정 구성 요소에 있습니다. 공격자는 유효한 토큰 없이도 admin과 같은 알려진 사용자의 사용자 이름만으로 해당 사용자의 비밀번호를 변경할 수 있습니다. 이는 백엔드가 제공된 사용자 이름에서 로드된 사용자 데이터로 $userdata를 정리하지 않...

CVE-2026-36956

CVE-2026-36956: Web管理インターフェースにおけるクロスサイトリクエストフォージェリ CSRF CVE ID: CVE-2026-36956 日付: 2026-04-29 発見者: Kirubel Solomne ベンダー: Shenzhen Dibit Network Equipment Co., Ltd. 製品: Dbit Router ファームウェアバージョン: V1.0.0 CWE: CWE-352 - クロスサイトリクエストフォージェリ CSRF 説明 Dbit Router ファームウェア V1.0.0...

CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation

CVE-2026-1529 Keycloak エクスプロイトツール Keycloak: 不適切な招待トークン検証による未承認の組織登録 免責事項 このツールは教育およびセキュリティテスト目的のみで使用してください。 明示的なテスト許可を得たシステムでのみ使用してください。コンピュータシステムへの不正アクセスは違法かつ非倫理的です。このツールの作者は、本ソフトウェアによって引き起こされた誤用や損害について一切の責任を負いません。 作成者: f3ds cr3w est, 2002 概要 CVE-2026-1529 は Keycloak...

CVE-2026-1529

CVE-2026-1529 Keycloak エクスプロイトツール CVE-2026-1529 : Keycloak - 不適切な招待トークン検証による未承認の組織登録 ⚠️ 警告 : このツールは教育目的および許可されたセキュリティテスト専用です。コンピュータシステムへの不正アクセスは違法です。 📋 目次 概要 機能 前提条件 インストール 使用方法 設定 動作原理 出力 トラブルシューティング 法的免責事項 貢献 クレジット 🎯 概要...

CVE-2026-103001

A flaw was found in pyjwt. This vulnerability allows a remote attacker to bypass token validation checks when an application reuses an options configuration across multiple token decoding requests. Because the library unintentionally modifies the caller's shared configuration dictionary when...

CVE-2026-46455

CVE-2026-46455 — camel-keycloak における ISACTIVE チェックの欠落 期限切れトークンの受け入れ 同じApache Camel脆弱性に対する実行可能な概念実証PoC再現コードです。ランタイムごとに1つ用意されています: ランタイム| ディレクトリ| スタック ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-keycloak 4.18.2 Camel Quarkus| camel-quarkus/| Quarkus 3.36.0 + Camel...

CVE-2026-100524 Cotonti through 1.0.0 Cross-Site Request Forgery via Extensions Manager

Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in the extensions manager that allows attackers to perform state-changing actions without anti-CSRF token validation. Attackers can craft links or embed images to force administrators to install, update, pause, or unpause...

CVE-2026-85289

The open-source application InvoicePlane (prior to version 1.7.2) is vulnerable to Cross-Site Request Forgery (CSRF) due to missing CSRF token validation on specific delete methods. Specifically, the Payments::delete(), Recurring::delete(), and User_clients::delete() functions omit the ensure_val...

CVE-2026-85289 InvoicePlane: Missing CSRF Token Validation on Multiple Delete Endpoints

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane omits ensurevalidpostrequest from delete methods including Payments::delete, Recurring::delete, and Userclients::delete. Although the routes require POST, they do not...

CVE-2026-65583

A flaw was found in Apache CXF. The OpenID Connect OIDC relying-party token validation in Apache CXF could accept specially crafted self-issued ID tokens. This bypasses necessary claim checks, such as issuer, subject, audience, and time, leading to an authentication bypass. This vulnerability...

CVE-2026-95654

Databasement before 1.7.14 validates invitation tokens only when the acceptance page loads, caching the authorization decision without re-checking token validity during acceptance. Attackers with a leaked or forwarded invitation link can load the page while pending, then accept the invitation aft...

CVE-2026-86466

Apache Airflow FAB provider: the Authentik OAuth path in the FAB auth manager does not validate the issuer or audience claims of the idtoken it accepts. An attacker holding a token that the same Authentik identity provider minted for a different client application can present it to Airflow and be...

CVE-2026-68532

Concrete CMS 9.0.0 to dashboard group type controller did not validate a CSRF token on its delete action, resulting in cross-site request forgery. A remote unauthenticated attacker could cause an authenticated user with group type management permission to delete a custom group type. The Concrete...

EUVD-2026-79174

Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery CSRF in the theme page-template activation feature. The Dashboard theme Inspect controller's activatefiles action created PageTemplate records from attacker-supplied pageTemplates values without validating an anti-CSRF token.A...

CVE-2026-81920

Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in the dashboard SEO Excluded Words page. The reset() controller action cleared the administrator-configured reserved-word list (concrete.seo.exclude_words) without validating the anti-CSRF token or restricting the reques...