offensive-azure

Collection of offensive tools targeting Microsoft Azure written in Python to be platform agnostic. The current list of tools can be found below with a brief description of their functionality. ./DeviceCode/devicecodeeasymode.py Generates a code to be entered by the target user Can be used for...

Trust-Decision-Security

Trust Decision Solver - リバースエンジニアリング版 このソフトウェアを使用すると、以下のことが可能です。 無限の動的フィンガープリントを生成 検出されることなく無限のTDパストークンを生成 含まれるWebセキュリティ上の欠陥は以下の通りです。 トークンドメインにTLSフィンガープリントチェックが存在しない ただし、小売サイトドメインにはTLSチェックが存在する フィンガープリントペイロードの検証と解析が行われていない システムのバージョン管理が強制されていない 動的スクリプトバージョンがペイロード検証がないため正常に機能しない...

CVE-2021-34646

CVE-2021-34646 PoC NVDによるこの脆弱性の詳細 Booster for WooCommerce...

java-insecure-random-cve-2021-27568

java-insecure-random-cve-2021-27568 CVE-2021-27568 のデモ: トークン生成における安全でないランダム性...

CVE-2026-30944-PoC

🔓 CVE-2026-30944 StudioCMS の安全でない API トークン生成による権限昇格 NVD • Advisory • CWE-639 概要 StudioCMS ≤ 0.3.0 の POST /studiocmsapi/dashboard/api-tokens エンドポイントは、認証済みユーザー（最低でも Editor ロール）が 他の任意のユーザー （owner や admin アカウントを含む）の API トークンを生成することを許可します。 このエンドポイントは、リクエストボディ内の user パラメータで対象ユーザーの UUID...

CVE-2024-27198_Lab

CVE-2024-27198Lab Vulnerability Research & Purple Team Demonstration Lab for JetBrains TeamCity Authentication Bypass CVE-2024-27198 Table of Contents About The Project CVE Details Built With Threat Intelligence & OSINT Real-World Impact & Exploitation Why this CVE is Critical Getting Started...

CVE-2024-27198_LAB

CVE-2024-27198 ラボ 説明 TeamCity には、認証で保護されていない管理者専用のトークン管理ページがあります。これにより、認証されていないユーザーは、既存ユーザーの ID を見つけられれば、管理者ユーザーのアクセストークンを生成できます。 CVE 詳細 CVE ID: CVE-2024-27198 CWE: CWE-288 CNA: JetBrains s.r.o. 基本スコア: 9.8 CRITICAL ベクター: CVSS:3.1 AV:N ネットワーク AC:L 低 PR:N なし UI:N 不要 S:U 変更なし C:H 高 I:H 高 A:H 高...

FragToken: Amplifying LLM Inference Costs through Noncanonical Token Generation

As large language model LLM inference becomes increasingly expensive, resource-consumption attacks pose a growing threat to model providers. Existing attacks typically amplify cost by inducing abnormally long or repetitive outputs on attacker-controlled or triggered requests, making them easier t...

CVE-2026-92298

EspoCRM through 10.0.8 uses PHP's rand function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographically secure generator. Remote unauthenticated attackers can guess these roughly 31-bit tokens to confirm opt-ins, accept or decline event...

CVE-2026-92298

EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographically secure generator. The tokens are roughly 31-bit , allowing remote unauthenticated attackers to guess them and confirm opt-ins, accept or...

CVE-2026-92298 EspoCRM through 10.0.8 Weak Token Generation via rand()

EspoCRM through 10.0.8 uses PHP's rand function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographically secure generator. Remote unauthenticated attackers can guess these roughly 31-bit tokens to confirm opt-ins, accept or decline event...

PT-2026-93257

Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 10.0.9 Description The software uses the PHP rand function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs. Because rand is not a cryptographically secure generator, remote...

CVE-2026-80172

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This...

CVE-2026-62862

Typebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default passwordless email magic-link authentication is vulnerable to login-code brute forcing that leads to account takeover. The email provider overrides NextAuth's default cryptographically secur...

PT-2026-81875

Typebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default passwordless email magic-link authentication is vulnerable to login-code brute forcing that leads to account takeover. The email provider overrides NextAuth's default cryptographically secur...

PT-2026-79540

WWBN AVideo through commit 9c39d8c8 contains an authorization bypass vulnerability where getToken creates tokens without binding to user identity or purpose, and plugin/Gallery/view/sections.php issues valid tokens to unauthenticated visitors. Attackers can retrieve a token from the Gallery...

BIT-GITLAB-2026-15831 Generation of Incorrect Security Tokens in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to bypass administrator-configured tool governance policies due to improper authorization enforcement during tok...

PT-2026-73296

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.3 and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to bypass administrator-configured tool governance policies due to improper authorization enforcement during tok...

CVE-2026-19636

The CVE-2026-19636 issue concerns CSRF token generation using a predictable method. The connected documents confirm a fix that increases randomness and entropy in token generation, addressing the vulnerability. The description does not specify affected products, versions, or exploit details. The ...

CVE-2026-19636 Insuffucient Protections Lead to Brute Force

An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation...