Authentication Replay Attack

Keycloak is vulnerable to Authentication Replay Attack. The vulnerability is due to improper validation and reuse protection of ExecuteActionsActionToken tokens in the WebAuthn flow, which allows an attacker to replay a captured execute-actions link and register their own authenticator to a...

EUVD-2020-2510

Malware in sbrugna...

CVE-2025-8616

CVE-2025-8616 affects OpenText OpenText Advanced Authentication (versions up to and including 6.5.0). A malicious browser plugin can record and replay the user authentication process to bypass authentication, representing a replay attack against the login flow. The vulnerability’s root cause is t...

CVE-2025-42959 Missing Authentication check after implementation of SAP Security Note 3007182 and 3537476

An unauthenticated attacker may exploit a scenario where a Hashed Message Authentication Code HMAC credential, extracted from a system missing specific security patches, is reused in a replay attack against a different system. Even if the target system is fully patched, successful exploitation...