offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

java-insecure-random-cve-2021-27568

java-insecure-random-cve-2021-27568 Demo of CVE-2021-27568: Insecure randomness in token generation...

CVE-2024-27198_LAB

CVE-2024-27198 Lab Description TeamCity provides an admin-only page for token management that is not protected by authentication. This allows an unauthenticated user to generate an access token for the admin user if they can find an ID of an existing user. CVE Details CVE ID: CVE-2024-27198 CWE:...

CVE-2026-63170

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to forge the shared-calendar iCal share token by deriving md5Id from predictable fields such as object creation time, which is self-disclosed through autorDate and t...

CVE-2026-63151

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to access private calendar data by exploiting a missing dateCrea value that causes the md5Id token to collapse to md5calendarId.userId, both small enumerable integer...

EUVD-2026-125587

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to forge the shared-calendar iCal share token by deriving md5Id from predictable fields such as object creation time, which is self-disclosed through autorDate and t...

EUVD-2026-125582

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to access private calendar data by exploiting a missing dateCrea value that causes the md5Id token to collapse to md5calendarId.userId, both small enumerable integer...

CVE-2026-30944-PoC

🔓 CVE-2026-30944 StudioCMS Privilege Escalation via Insecure API Token Generation NVD • Advisory • CWE-639 Overview The POST /studiocmsapi/dashboard/api-tokens endpoint in StudioCMS ≤ 0.3.0 allows any authenticated user at minimum Editor role to generate API tokens for any other user , including...

Trust-Decision-Security

Trust Decision Solver - Reverse Engineered This software lets you Generate infinite dynamic fingerprints Generate infinite TD pass tokens with no detection Some of the web securities flaws include: TLS fingerprint checks not present on token domain However TLS checks present on retail site domain...

PT-2026-147029

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to access private calendar data by exploiting a missing dateCrea value that causes the md5Id token to collapse to md5calendarId.userId, both small enumerable integer...

PT-2026-147034

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to forge the shared-calendar iCal share token by deriving md5Id from predictable fields such as object creation time, which is self-disclosed through autorDate and t...

CVE-2021-34646

CVE-2021-34646 PoC this vulnerability detail by NVD Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the processemailverification function due to a random token generation weakness in the resetandmailactivationlink...

CVE-2024-27198_Lab

CVE-2024-27198Lab Vulnerability Research & Purple Team Demonstration Lab for JetBrains TeamCity Authentication Bypass CVE-2024-27198 Table of Contents About The Project CVE Details Built With Threat Intelligence & OSINT Real-World Impact & Exploitation Why this CVE is Critical Getting Started...

Devolutions Server < 2026.2.21.0 / 2026.3.5.0 < 2026.3.11.0 Multiple Vulnerabilities (DEVO-2026-0037)

The version of Devolutions Server installed on the remote host is prior to 2026.2.21.0, or is 2026.3.5.0 through 2026.3.10.0. It is, therefore, affected by multiple vulnerabilities, including: - Missing authorization in the PAM AD computer import endpoint in Devolutions Server allows an...

CVE-2026-18451

The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session...

EUVD-2026-110634

The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session...

SuperMicro MBD-X12SPI encryption issue vulnerability

The SuperMicro MBD-X12SPI version 01.07.20 contains an encryption vulnerability. This vulnerability arises because the HTML5 KVM-over-IP console uses tokens returned via its web interface for authentication; however, there is a weakness in token generation. As a result, attackers may guess sessio...

PT-2026-125893

The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session...

Red Hat: CVE-2026-55889: xdg-desktop-portal: xdg-desktop-portal: unauthorized data disclosure via predictable token generation

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-drop and copy-paste data targeted at other applications to itself. Some portals generate tokens which provide access to...

CVE-2026-114486

Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the Network Access Rules of a virtual gateway and reach denied hosts via wildcard additional destinations signed into the...