ForgeCert

ForgeCert ForgeCert는 BouncyCastle C API와 도난당한 인증 기관CA 인증서 + 개인 키를 사용하여 Active Directory에 인증할 수 있는 임의의 사용자를 위한 인증서를 위조합니다. 이 공격은 "Certified Pre-Owned" 백서에서 DPERSIST1으로 명시되어 있습니다. 이 코드 베이스는 백서가 게시된 후 약 45일 후에 공개되었습니다. @tifkin은 ForgeCert의 주요 작성자입니다. @tifkin과 @harmj0y는 관련 Active Directory 인증서 서비스 연구블...

SMBetray

SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...

EUVD-2026-88547

PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion...

EthernalBlue_report

EthernalBlue 보고서 무엇인가요? 이는 NSA에 의해 개발되고 해커 그룹에 의해 유출된 익스플로잇으로, 주로 WannaCry나 NotPetya와 같은 랜섬웨어 공격에 사용된 것으로 알려져 있습니다... 왜 이 보고서를 만들었나요? 이 방의 주요 목적인 Metasploit을 사용하지 않고 Tryhackme EthernalBlue 방에 대한 이 보고서를 작성하라는 요청을 받았습니다. 더 많은 정보? EthernalBlue에 대해 더 알고 싶다면 다음 자료를 확인하세요: Wikipedia Microsoft Youtube -...

scavenger_scanner

CVE-2025-54313 IOC 스캐너 eslint-config-prettier 공급망 공격CVE-2025-54313과 관련된 침해 지표IOC를 탐지하는 크로스 플랫폼 스캐너입니다. 2025년 7월 18일, 여러 인기 npm 패키지가 피싱 공격을 통해 손상되었습니다. 공격자는 관리자의 npm 토큰에 접근하여 플랫폼별 악성코드를 포함한 악성 버전을 게시했습니다. 영향을 받은 패키지 및 버전 패키지| 손상된 버전 ---|--- eslint-config-prettier| 8.10.1, 9.1.1, 10.1.6, 10.1.7...

CVE-2026-103279 Ghost 3.10.0 before 6.34.0 Session Invalidation Bypass

Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain access to user accounts even after the associated user changes their password...

CVE-2026-103279: Insufficient Session Expiration

Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain access to user accounts even after the associated user changes their password...

Linux Distros Unpatched Vulnerability : CVE-2026-102275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because...

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks

An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July. Neither the tax administration nor France's national cybersecurity agency saw the data leave. The attack was not sophisticated, the...

The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub

See how the Blue Agent investigated a multi-platform attack in minutes, following evidence across AWS and GitHub to uncover compromised credentials, stolen source code, and custom data exfiltration tooling...

PYSEC-2026-4183

PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding ...

PYSEC-2026-4183

PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding ...

CVE-2026-102275

PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding ...

UBUNTU-CVE-2026-102275

PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding ...

CVE-2026-102275

PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding ...

CVE-2026-102275: Insufficient Verification of Data Authenticity

PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding ...

CVE-2026-58269 Sync-in Server has a complete 2FA Bypass via `POST /api/auth/token`

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, POST /api/auth/token authenticates with username and password only, then calls getTokens, which returns full access and refresh JWTs without checking whether the account has TO...

CVE-2026-58269

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0 , the POST /api/auth/token endpoint authenticates users with only username and password, then calls getTokens(), which returns full access and refresh JWTs without checking whet...

CVE-2026-94112 mayswind ezBookkeeping before 2.0.0 TOTP Replay Attack

mayswind ezBookkeeping before 2.0.0 fails to invalidate TOTP passcodes after use, allowing attackers to replay captured codes within the acceptance window. Attackers with stolen credentials can authenticate and reuse a captured passcode against multiple authorization attempts for approximately 90...

CVE-2026-94112 mayswind ezBookkeeping before 2.0.0 TOTP Replay Attack

mayswind ezBookkeeping before 2.0.0 fails to invalidate TOTP passcodes after use, allowing attackers to replay captured codes within the acceptance window. Attackers with stolen credentials can authenticate and reuse a captured passcode against multiple authorization attempts for approximately 90...