crauEmu

마스코트 디자인:@kottsarapkin crauEmu 는 코드 재사용 공격을 위한 페이로드를 개발 및 분석할 수 있는 uEmu 확장 프로그램입니다. ZeroNights 2019 발표 자료 데모 1 - X32-64, Edge, pwnjs의 rop-gadgets 데모 2 - ARM64, checkm8 콜백 체인 RopEditor 설치 1. crauEmu.py 파일을 uEmu.py와 같은 위치에 넣습니다. 2. IDA에서 File / Script file... 또는 ALT+F7을 사용하여 crauEmu.py 를 로드합니다...

CVE-2024-22243

CVE-2024-22243 @SeanPesce로부터 사용된 코드...

CVE-2026-96446

A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the silent authentication path prompt=none is used, which allows the authorization process to skip certain steps if a user is already logged in. Due to this bypass, the security rule that...

CVE-2026-96446

A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the silent authentication path prompt=none is used, which allows the authorization process to skip certain steps if a user is already logged in. Due to this bypass, the security rule that...

CVE-2026-96446 Keycloak-services: keycloak-services: par single-use bypass via prompt=none silent authentication path

A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the silent authentication path prompt=none is used, which allows the authorization process to skip certain steps if a user is already logged in. Due to this bypass, the security rule that...

CVE-2026-96446

A flaw exists in the Keycloak Pushed Authorization Request (PAR) implementation where the silent authentication path (prompt=none ) allows the authorization process to skip specific steps for already logged-in users. This bypass prevents the enforcement of the security rule requiring a pushed req...

EUVD-2026-85221

A flaw was found in the Pushed Authorization Request PAR implementation of Keycloak. The issue occurs when the silent authentication path prompt=none is used, which allows the authorization process to skip certain steps if a user is already logged in. Due to this bypass, the security rule that...

CLEANSTART-2026-RG79000 Vault and Vault Enterprise’s (“Vault”) TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period

Security vulnerability affects the vault package. Vault and Vault Enterprise’s “Vault” TOTP Secrets Engine code validation endpoint is susceptible to code reuse within its validity period...

Improper Authorization

Apache CXF is vulnerable to Improper Authorization. The vulnerability is due to a flaw in the removeCodeGrant functionality that allows authorization codes to remain reusable, which allows an attacker who captures a valid authorization code to redeem it multiple times and obtain multiple valid...

Exploit for CVE-2026-73311

CVE-2026-73311 XenForo before 2.3.13 allows an OAuth2 authori...

CVE-2026-73311

XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code. Attackers can exploit the failure to invalidate or mark authorization codes as consumed after initial token...

EUVD-2026-72782

XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code. Attackers can exploit the failure to invalidate or mark authorization codes as consumed after initial token...

CVE-2026-73311 XenForo < 2.3.13 OAuth2 Authorization Code Reuse

XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code. Attackers can exploit the failure to invalidate or mark authorization codes as consumed after initial token...

CVE-2026-73311

XenForo before 2.3.13 is affected by an OAuth2 authorization code reuse vulnerability. The root cause is a failure to invalidate or mark authorization codes as consumed after initial token issuance, allowing an attacker to resubmit a previously used authorization code and obtain an independent to...

CVE-2026-73311: Authentication Bypass by Capture-replay

XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code. Attackers can exploit the failure to invalidate or mark authorization codes as consumed after initial token...

GO-2026-6336 Gitea OAuth2 authorization codes can be reused after expiry in code.gitea.io/gitea

Gitea OAuth2 authorization codes can be reused after expiry in code.gitea.io/gitea...

GHSA-R3J6-GPJW-QFJR Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used

A flaw in the handling of one-time codes for app-based multi-factor authentication allows a previously issued code to be used after a newer code has already been accepted. This issue does not affect email-based MFA. Submitting the exact same code twice was already prevented, but any other code...

Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used

A flaw in the handling of one-time codes for app-based multi-factor authentication allows a previously issued code to be used after a newer code has already been accepted. This issue does not affect email-based MFA. Submitting the exact same code twice was already prevented, but any other code...

CVE-2026-84306

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6, packages/panels/src/Auth/MultiFactor/App/AppAuthentication.php uses AppAuthentication::verifyCode with a used-code cache key derived from both the app authentication secret an...

CVE-2026-84306 Filament: Multi-factor authentication (app) codes can still be used after a newer code has been used

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6, packages/panels/src/Auth/MultiFactor/App/AppAuthentication.php uses AppAuthentication::verifyCode with a used-code cache key derived from both the app authentication secret an...