CVE-2026-114618

The Authlib Python library (prior to version 1.9.0 ) is vulnerable due to an insecure default in the RFC 7523 JWTBearerGrant.get_audiences() method. Because this method returns an empty list by default, JWTBearerGrant.verify_claims() only requires the presence of an aud claim without verifying it...

CVE-2026-114618 Authlib: Default JWT bearer grant accepts assertions for the wrong audience

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...

CVE-2026-114618

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...

burp-automation

BurpOMation Performing automated scan using Burp Suite Pro & Vmware Burp Rest API with Robot Framework using Python3. Blog Visit blog for detailed explanation of each step. Explanation & Installation Blog What it does One click run using bash installs all the dependencies with verbose...

URLCADIZ

URLCADIZ v1.0 Author: https://github.com/PerezMascato Twitter: https://twitter.com/perezmascato Email: [email protected] no... i'm not pwned! A simple script to generate a hidden url for social engineering. Legal disclaimer: Usage of URLCADIZ for attacking targets without prior mutual consen...

FakeDataGen

FakeDataGen is a Full Valid Fake Data Generator. This tool helps you to create fake accounts in Spanish format with fully valid data. Within this information, you can find the most common names, emails, bank details and other useful information. Requirements Python 3 Install requirements.txt...

EUVD-2026-108519

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parseidtoken reads the noncesupported decision from the untrusted ID token being validated and sets the expected nonce to null when that claim is the JSON boolean false. In implicit and hybrid...

CVE-2026-114617

The Authlib Python library, used for building OAuth and OpenID Connect servers, contains a vulnerability in versions prior to 1.9.0 . The OpenIDMixin.parse_id_token() function incorrectly trusts the nonce_supported claim from an untrusted ID token. When this claim is set to false , the library se...

CVE-2026-114617 Authlib: ID token can disable its own nonce validation via the nonce_supported claim

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parseidtoken reads the noncesupported decision from the untrusted ID token being validated and sets the expected nonce to null when that claim is the JSON boolean false. In implicit and hybrid...

CVE-2026-114617

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parseidtoken reads the noncesupported decision from the untrusted ID token being validated and sets the expected nonce to null when that claim is the JSON boolean false. In implicit and hybrid...

sandcastle

Inspired by a conversation with Instacart's @nickelser on HackerOne, I've optimised and published Sandcastle – a Python script for AWS S3 bucket enumeration, formerly known as bucketCrawler. The script takes a target's name as the stem argument e.g. shopify and iterates through a file of bucket...

cartography

Documentation Cartography is a Python tool that pulls infrastructure assets and their relationships into a Neo4j graph database. What it connects: AWS, GCP, Azure, Kubernetes, GitHub, Okta, Entra ID, CrowdStrike, and 30+ more platforms. Questions it answers: Which identities have access to which...

CORStest

CORStest A simple CORS misconfiguration scanner Based on the research ofJames Kettle CORStest is a quick & dirty Python 3 tool to find Cross-Origin Resource Sharing CORS misconfigurations. It takes a text file as input which may contain a list of domain names or URLs. Currently, the following...

toutatis

Toutatis 👋 Hi there! For any professional inquiries or collaborations, please reach out to me at: [email protected] 📧 Preferably, use your professional email for correspondence. Let's keep it short and sweet, and all in English! Toutatis is a tool that allows you to extract information from...

python-log4rce

Python Log4RCE An all-in-one pure Python3 PoC for CVE-2021-44228. Sample python3 log4rce.py --target "linux" --payload "PAYLOAD" http -X POST --url "http://localhost:8080/" --data "address=" INFO:HTTP:Running on local port 1337 INFO:HTTP:Remote target is http://127.0.0.1:1337/LinuxExploit.class...

CIS GitLab Benchmark Scanner

CIS GitLab Benchmark Scanner - gitlabcis Background On April 17th 2024, GitLab™ published a blog post introducing its Center for Internet Security® CIS GitLab Benchmark. With the goal to improve the security of the product and offer hardening recommendations to GitLab's customers. You can downloa...

gha-lab-ba981941f0

Automated research artifact — not the upstream project. This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of dedupeio/dedupe at commit...

JQShell

JQShell A weaponized version of CVE-2018-9206. Disclaimer Using this agianst servers you dont control, is illegal in most countries. The author claims no responsibility for the actions of those who use this software for illegal purposes. This software is intended for educational use only. No...

koppeling-p

koppeling-p Adaptive DLL hijacking / dynamic export forwarding - EAT preserve Overview This project is a limited, Python-only extension to the amazing project by Nick Landers @monoxgas, available here. Differences The only difference to the original project is that koppeling-p p stands for...

SSHBuster

SSHBuster SSHBuster is a powerful command-line SSH brute-forcing tool designed for ethical hacking and penetration testing. It performs dictionary-based attacks to find valid SSH login credentials efficiently. Features Brute-force SSH servers using different username and password combinations...