CVE-2022-29593

CVE-2022-29593 - キャプチャリプレイによる認証バイパス Dingtian-DT-R002 タイトル キャプチャリプレイによる認証バイパス 公開: バージョン: 1.0 ベンダー: Shenzhen Dingtian Technologies Co.,Ltd 製品: 2チャンネルリレーボード/リレーカード 影響を受けるバージョン: ファームウェア V3.1.276A 製品 - Dingtian DTR004 Ali Express リンク 製品説明 2チャンネルリレーボード/リレーカード WiFi/RS485/Ethernet対応 技術仕様 root@kitploit: 概...

CVE-2022-43704

CVE-2022-43704 - 非エンドポイントからのチャネルアクセス可能/キャプチャリプレイによる認証バイパス Sinilink XY-WFTX WiFiリモートサーモスタットモジュール 温度コントローラ タイトル 製品ドキュメント アプリケーション ユーザーマニュアル ハードウェア データシート ESP8285 バックコンバータ ファームウェア 製品説明 root@kitploit: Overview WIFI Remote Thermostat High Precision Temperature Controller Module Cooling and Heating APP...

BIT-TOMCAT-2026-65905 Apache Tomcat: Limited replay attack possible with DIGEST authentication

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

CVE-2026-84003

Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-69676

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...

EUVD-2026-73922

Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-84003

Microsoft Authentication Library (MSAL) for Node.js is affected by an authentication bypass via capture-replay that allows an unauthorized network attacker to perform spoofing . The underlying cause is the ability to capture and replay authentication tokens, leading to high confidentiality and in...

CVE-2026-69676

CVE-2026-69676 is an authentication bypass by capture-replay vulnerability in Windows Kerberos that allows an authorized attacker to achieve remote code execution over a network. The underlying mechanism involves replaying captured Kerberos authentication traffic, enabling privilege escalation be...

EUVD-2026-73071

Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...

Microsoft Authentication Library (MSAL) for Node.js Spoofing Vulnerability

Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...

PT-2026-87648

News: Windows Kerberos CVE-2026-69676 CVSS 8.8 lets a low-priv domain user replay a crafted auth request and run code on a DC; Exploitation More Likely; patch DCs now. https://t.co/eME8i0s2er...

tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

A flaw was found in Apache Tomcat. This vulnerability, an authentication bypass by capture-replay, affects the DIGEST authenticator. A remote attacker can exploit this by making a specially crafted DIGEST authenticated request with a nonceCount at the upper boundary of the replay window. This...

CVE-2026-65905

A flaw was found in Apache Tomcat. This vulnerability, an authentication bypass by capture-replay, affects the DIGEST authenticator. A remote attacker can exploit this by making a specially crafted DIGEST authenticated request with a nonceCount at the upper boundary of the replay window. This...

CVE-2026-13734 Zephyr WireGuard mutates peer state before anti-replay check, enabling capture-replay endpoint hijack

Zephyr's WireGuard VPN data-plane receive handler wgprocessdatamessage in subsys/net/lib/wireguard/wgcrypto.c validated the anti-replay counter too late. After AEAD decryption of a MESSAGETRANSPORTDATA packet succeeded, the code committed several peer-state changes — updatepeeraddr endpoint roami...

CVE-2026-13734

Zephyr RTOS's WireGuard data-plane receive handler wg_process_data_message() in subsys/net/lib/wireguard/wg_crypto.c validated the anti-replay counter only after committing several peer-state mutations (endpoint roaming update, liveness timers, and keypair rotation). Because the AEAD tag authenti...

CVE-2026-13734 Zephyr WireGuard mutates peer state before anti-replay check, enabling capture-replay endpoint hijack

Zephyr's WireGuard VPN data-plane receive handler wgprocessdatamessage in subsys/net/lib/wireguard/wgcrypto.c validated the anti-replay counter too late. After AEAD decryption of a MESSAGETRANSPORTDATA packet succeeded, the code committed several peer-state changes — updatepeeraddr endpoint roami...

SUSE CVE-2026-65905

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

EUVD-2026-66128

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

GHSA-9XV2-5V5Q-P794 Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...