EUVD-2026-123053

The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for another Service Provider to be replayed to authenticate to Kong...

CVE-2026-92439

The SAML plugin in Kong Gateway Enterprise is vulnerable to a replay attack because it fails to enforce AudienceRestriction . This flaw allows an attacker to use a valid assertion issued for a different Service Provider to successfully authenticate to Kong. The impact includes high confidentialit...

GHSA-5957-C7QM-M469 Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingress

Impact The Action Mailbox Mailgun ingress authenticates a request with an HMAC of the timestamp and token parameters concatenated without a separator, and ActionMailbox::Ingresses::Mailgun::InboundEmailsController::Authenticatorrecent? rejects only timestamps more than 2 minutes in the past...

Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingress

Impact The Action Mailbox Mailgun ingress authenticates a request with an HMAC of the timestamp and token parameters concatenated without a separator, and ActionMailbox::Ingresses::Mailgun::InboundEmailsController::Authenticatorrecent? rejects only timestamps more than 2 minutes in the past...

CVE-2026-126068

The Action Mailbox Mailgun ingress in Ruby on Rails versions prior to 8.1.4.1 and 8.0.5.2 is vulnerable to a signature replay attack. The root cause is that the system authenticates requests using an HMAC of concatenated timestamp and token parameters without a separator. This lack of boundary de...

CVE-2026-126068 Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingress

Action Mailbox routes incoming emails to controller-like mailboxes for processing in Rails. Prior to 8.1.4.1 and 8.0.5.2, the Action Mailbox Mailgun ingress authenticates a request with an HMAC of the timestamp and token parameters concatenated without a separator, and...

CVE-2026-120974

On affected platforms running Arista EOS with the IPsec AutoVPN feature configured with dynamic paths, the configured IPsec replay window may fail to apply as expected. This flaw results in IPsec anti-replay protection remaining silently inactive, even when configured via an SA policy. While the ...

EUVD-2026-122905

On affected platforms running Arista EOS with IPsec AutoVPN Feature configured with dynamic paths, the configured IPsec replay window may not be applied as expected. As a result, IPsec anti-replay protection may be silently inactive even when it has been configured via an SA policy, contrary to t...

CVE-2026-62903

Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-62903

A vulnerability in Microsoft SQL Server allows an unauthorized attacker to perform an authentication bypass by capture-replay , potentially leading to information disclosure over a network. Microsoft has released updates to address this issue. For more details and remediation, visit the MSRC upda...

EUVD-2026-121568

Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network...

CVE-2022-29593

CVE-2022-29593 - Authentication Bypass by Capture Replay Dingtian-DT-R002 Title Authentication Bypass by Capture-replay Published: Version: 1.0 Vendor: Shenzhen Dingtian Technologies Co.,Ltd Product: 2 Channel Relay Board/Relay Card Version affected: Firmware V3.1.276A Product - Dingtian DTR004 A...

EUVD-2026-121695

Authentication bypass by capture-replay in the MigTD for the IntelR TDX Migration Trust Domain MigTD within Ring 0: Hypervisor may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resu...

CVE-2026-61473

The Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor is vulnerable to an authentication bypass by capture-replay (CWE-294). A system software adversary with privileged user access can perform a low-complexity attack to achieve an escalation of privilege . This vulnerability m...

oproxy

oproxy oproxy is a local HTTP, HTTPS, HTTP/3, WebSocket, and SOCKS5 proxy for inspecting, replaying, and modifying traffic from browsers, CLIs, mobile apps, API clients, services, and test suites. It runs a web UI, API, and optional AI assistant on the same local listener, so you can capture...

CVE-2017-11427-DEMO

CVE-2017-11427-DEMO Basic Environment $ sudo apt-get install libxml2-dev libxslt1-dev $ sudo apt-get install libxml2-dev libxmlsec1-dev libxmlsec1-openssl DEMO: $ git clone https://github.com/CHYbeta/CVE-2017-11427-DEMO.git $ cd CVE-2017-11427-DEMO $ source venv/bin/active $ cd vulnsaml $ python...

readme2demo

readme2demo — verified tutorials & demo videos from your README ▶ readme2demo generating its own tutorial: an AI agent runs this repo's README in a sandbox, a fresh container replays every step, then the demo is rendered. Full self-run output in examples/readme2demo · run against another project ...

fzy

fzy fozzylang General-purpose systems language and production toolchain with a memory-safe-by-default shipped safe-language surface, verifiable correctness, deterministic execution, and replay-first debugging built in. fzy ships one production CLI, fz, for both compiler workflows and deterministi...

CVE-2026-111260

The Jakarta Security OpenID Connect authentication mechanism generates the state and nonce values with a non-cryptographic random number generator and insufficient entropy. A remote attacker who predicts these values can forge an authentication callback that logs a victim into the attacker's...

tusk-cli

!IMPORTANT Previously used tusk-drift-cli? This repo has moved to tusk-cli, and older installed CLI versions may not auto-update across the rename. Please reinstall using the current install instructions below. The Tusk CLI provides tools for automated testing workflows. It supports three product...