Improper Token Validation

pac4j-oidc is vulnerable to Improper Token Validation. The vulnerability is due to the library accepting OIDC callbacks that contain only an access token without performing authorization code or ID token validation, where attackers can substitute access tokens minted for other clients to create...

CVE-2026-87879

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87879

The software Acronis Cyber Protect 17 on Linux and Windows is vulnerable to a sensitive information disclosure due to improper token validation . This issue is associated with CWE-347 (Improper Verification of Cryptographic Signature). The vulnerability affects versions prior to build 42587 . Acc...

CVE-2026-87103

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87101

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87101

Acronis Cyber Protect 17 for Linux and Windows is vulnerable to sensitive information disclosure prior to build 42587 . The root cause is identified as improper token validation , specifically relating to CWE-347 (Improper Verification of Cryptographic Signature) . This vulnerability allows for t...

CVE-2026-87102: Acronis Acronis Cyber Protect 17: Sensitive information disclosure and manipulation due to improper token validation

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

Acronis Cyber Protect 17 encryption issue vulnerability

Versions of Acronis Cyber Protect prior to build 17 42587 contain an encryption vulnerability stemming from improper token validation. This vulnerability may lead to sensitive information leakage and data tampering...

CVE-2026-87101: Acronis Acronis Cyber Protect 17: Sensitive information disclosure due to improper token validation

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

Acronis Cyber Protect 17 encryption issue vulnerability

Versions of Acronis Cyber Protect prior to build 42587 contain an encryption vulnerability stemming from improper token validation, which may lead to sensitive information leakage...

CVE-2026-87879: Acronis Acronis Cyber Protect 17: Sensitive information disclosure due to improper token validation

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

Acronis Cyber Protect 17 encryption issue vulnerability

Versions of Acronis Cyber Protect prior to build 42587 contain an encryption vulnerability stemming from improper token validation, which may lead to sensitive information leakage...

CVE-2026-47202

Kavita (cross‑platform reading server) before version 0.9.0.2 is affected by an improper token validation flaw that allows a remote, unauthenticated attacker to obtain a JWT for any user, including admins, given knowledge of the username. The issue stems from inadequate validation of tokens and i...

CVE-2026-47202

Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated threat actor to request a JWT for any user including admins given knowledge of their username. This vulnerability is fixed in 0.9.0.2...

CVE-2026-47202: Improper Authentication

Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated threat actor to request a JWT for any user including admins given knowledge of their username. This vulnerability is fixed in 0.9.0.2...

CVE-2021-1388: Improper Privilege Management

A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator MSO installed on the Application Services Engine could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is due to improper token validation on a specific API endpoint...

CVE-2020-5268

In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerability in how tokens are validated in some cases. Saml2 tokens are usually used as bearer tokens - a caller that presents a token is assumed to be the subject of the token. There is...

Microsoft Windows - Improper Token Validation Privilege Escalation

Microsoft Windows - Improper Token Validation Privilege Escalation / Removed include "stdafx.h" / str0ke / include include define INFOBUFFERSIZE MAXCOMPUTERNAMELENGTH + 1 define PATHSIZE INFOBUFFERSIZE + MAXPATH + 4 typedef UINT WINAPI PFnMsiInstallProductLPCSTR szPackagePath, LPCSTR szCommandLin...

Microsoft Windows - Improper Token Validation Privilege Escalation

/ Removed include "stdafx.h" / str0ke / include include define INFOBUFFERSIZE MAXCOMPUTERNAMELENGTH + 1 define PATHSIZE INFOBUFFERSIZE + MAXPATH + 4 typedef UINT WINAPI PFnMsiInstallProductLPCSTR szPackagePath, LPCSTR szCommandLine; int mainint argc, char argv HANDLE hToken,hThread; HMODULE hMsi ...

MS Windows Improper Token Validation Local Exploit (working)

Exploit for unknown platform in category local exploits ============================================================ MS Windows Improper Token Validation Local Exploit working ============================================================ / Removed include "stdafx.h" / str0ke / include include defi...