Shwmae

Shwmae Shwmae shuh-my es una herramienta de abuso de Windows Hello que se presentó durante DEF CON 32 como parte de la charla Abusing Windows Hello Without a Severed Hand. El propósito de la herramienta es abusar de Windows Hello desde un contexto de usuario privilegiado. root@kitploit: Shwmae...

kanidm

Kanidm - Simple and Secure Identity Management About Kanidm is a simple and secure identity management platform, allowing other applications and services to offload the challenge of authenticating and storing identities to Kanidm. The goal of this project is to be a complete identity provider,...

ephemera

Ephemera: Autoridad Certificadora SSH de Cero Confianza Ephemera es una Autoridad Certificadora CA SSH ligera y autoalojada, diseñada para imponer acceso de Cero Confianza Zero-Trust para infraestructura. Reemplaza las claves SSH estáticas con certificados de corta duración, integra MFA WebAuthn...

CVE-2022-28281

CVE-2022-28281: Escritura fuera de límites en Mozilla Firefox debido a extensiones WebAuthN inesperadas Este es un error que puede desencadenarse desde un proceso de renderizado de Firefox en Windows comprometido. Si un proceso de contenido comprometido envía un número inesperado de extensiones...

CVE-2025-26788

CVE-2025-26788 Configuración del entorno Paso 1 - Verificar la ejecución de Docker Desktop docker version Paso 2 - Construir la imagen cd C:\Users\jhcho\Desktop\passkey\CVE-2025-26788 docker build -t skfs . Paso 3 - Ejecutar el contenedor docker run -d --name skfs --hostname skfs.localdomain...

CVE-2026-73313

CVE-2026-73313 XenForo before 2.3.13 can complete one user's two-step login with a passkey owned by a different user. What happens The passkey manager performs a global lookup using the credential ID supplied in the assertion and correctly verifies that credential's WebAuthn signature. The TFA...

CVE-2026-73313

XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential during the WebAuthn assertion step. The passkey verification...

CVE-2026-73313

XenForo versions before 2.3.13 contain an MFA bypass vulnerability in the passkey TFA provider . During the WebAuthn assertion step, the passkey verification path performs a global credential lookup without validating that the matched credential belongs to the user whose login is pending. This al...

CVE-2026-73313 XenForo < 2.3.13 MFA Bypass via Passkey TFA Provider

XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential during the WebAuthn assertion step. The passkey verification...

EUVD-2026-72784

XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential during the WebAuthn assertion step. The passkey verification...

EUVD-2026-68123

Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthnlogin route that allows logged-in users to authenticate as any other account. Attackers can exploit improper account resolution logic that falls back to session account identifiers instead of validating the...

CVE-2026-82466 Rodauth before 2.46.0 Authentication Bypass via webauthn_login

Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthnlogin route that allows logged-in users to authenticate as any other account. Attackers can exploit improper account resolution logic that falls back to session account identifiers instead of validating the...

CVE-2026-82466

Rodauth versions before 2.46.0 contain an authentication bypass in the webauthn_login route. The root cause is improper account resolution logic that falls back to session account identifiers instead of validating the credential binding, allowing a logged-in user to authenticate as any other acco...

PT-2026-83446

Name of the Vulnerable Software and Affected Versions Rodauth versions prior to 2.46.0 Description An authentication bypass exists in the 'webauthn login' route. Logged-in users can authenticate as any other account due to improper account resolution logic. The system incorrectly falls back to...

CVE-2026-47841

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

CVE-2026-47841 WebAuthn User Verification Bypass via Session Serialization

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

EUVD-2026-66639

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

CVE-2026-47841

Spring Security 's WebAuthn support is vulnerable to a user verification bypass when the application uses a distributed HTTP session store . The root cause is tied to session serialization , which can allow an attacker to bypass the user verification step of a WebAuthn authenticator. Affected ver...

PT-2026-82233

Name of the Vulnerable Software and Affected Versions Spring Security version 7.1.0 Spring Security versions 7.0.0 through 7.0.6 Spring Security versions 6.5.0 through 6.5.11 Spring Security versions 6.4.0 through 6.4.18 Description An application using WebAuthn support may be vulnerable to user...

BIT-KEYCLOAK-2026-37982 Keycloak: org.keycloak.authentication: keycloak: unauthorized account takeover via webauthn token replay

A flaw was found in Keycloak. This authentication vulnerability allows a remote attacker to replay ExecuteActionsActionToken tokens within Keycloak's WebAuthn Web Authentication flow. By intercepting an execute-actions email link, an attacker can register their own authenticator to a victim's...