Lucene search
+L

389 matches found

Kitploit
Kitploit
added 2026/09/09 4:11 p.m.7 views

CVE-2026-30945-PoC

🗑️ CVE-2026-30945 StudioCMS IDOR — Revocación Arbitraria de Tokens API que Conduce a Denegación de Servicio NVD • Advisory • CWE-639 Resumen El endpoint DELETE /studiocmsapi/dashboard/api-tokens en StudioCMS ≤ 0.3.0 permite que cualquier usuario autenticado con privilegios de editor o superiores...

7.1CVSS5.9AI score0.00452EPSS
SaveExploits2References1
NVD
NVD
added 2026/09/09 2:17 p.m.7 views

CVE-2026-86762

Snipe-IT before 8.7.0 does not apply the CheckUserIsActivated middleware to the api middleware group in app/Http/Kernel.php, and deactivating a user does not revoke that user's Passport personal access tokens. As a result, although a deactivated account is correctly refused at web login, its...

8.6CVSS0.00311EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/09/09 1:32 p.m.7 views

EUVD-2026-74939

Snipe-IT before 8.7.0 does not apply the CheckUserIsActivated middleware to the api middleware group in app/Http/Kernel.php, and deactivating a user does not revoke that user's Passport personal access tokens. As a result, although a deactivated account is correctly refused at web login, its...

8.6CVSS0.00311EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/08 2:42 a.m.10 views

CVE-2026-71206-PoC

CVE-2026-71206 — Shiori: JWT CheckToken nunca vuelve a validar el estado de la cuenta Producto: go-shiori/shiori Archivo: internal/domains/auth.go CWE: CWE-613 — Expiración de sesión insuficiente CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L — 8.2 Alta CNA: Turan Security · registro CVE Descripci...

8.3CVSS5.9AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/01 4:17 p.m.10 views

CVE-2026-84203

Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attackers to maintain account access. An attacker with a stolen refresh token can call the RefreshToken RPC to obtain new access tokens and rotate the refresh token indefinitely,...

8.6CVSS0.00255EPSS
SaveExploits0References4
CVE
CVE
added 2026/09/01 3:18 p.m.30 views

CVE-2026-84203

Memos versions 0.26.0 through 0.30.0 contain an insufficient session expiration flaw: refresh tokens are not revoked when a user changes their password. An attacker holding a stolen refresh token can call the RefreshToken RPC to mint new access tokens and rotate the refresh token indefinitely, ef...

8.6CVSS5.9AI score0.00255EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/01 3:18 p.m.9 views

EUVD-2026-69290

Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attackers to maintain account access. An attacker with a stolen refresh token can call the RefreshToken RPC to obtain new access tokens and rotate the refresh token indefinitely,...

8.6CVSS5.9AI score0.00255EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/01 3:18 p.m.12 views

CVE-2026-84203 Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Change

Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attackers to maintain account access. An attacker with a stolen refresh token can call the RefreshToken RPC to obtain new access tokens and rotate the refresh token indefinitely,...

8.6CVSS5.9AI score
SaveExploits0References6
OSV
OSV
added 2026/08/31 2:37 p.m.6 views

BIT-KEYCLOAK-2026-18218 Keycloak-services: keycloak-services: client not-before revocation ignored when realm not-before is older but nonzero

A flaw was found in the TokenManager component of the Keycloak identity management service. When an administrator attempts to revoke tokens for a specific application client using a "not-before" policy, the revocation may be silently ignored if the overall security realm already has an older,...

5.4CVSS5.8AI score0.00131EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/08/28 10:15 p.m.14 views

Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

Impact Graylog contains an insecure direct object reference IDOR vulnerability in the token revocation endpoint. An authenticated user can delete access tokens belonging to other users, including service account tokens and administrator tokens, if they know or can guess a valid token identifier...

5.3CVSS5.8AI score0.00335EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2026/08/28 10:15 p.m.7 views

GHSA-J769-9GV9-65GR Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

Impact Graylog contains an insecure direct object reference IDOR vulnerability in the token revocation endpoint. An authenticated user can delete access tokens belonging to other users, including service account tokens and administrator tokens, if they know or can guess a valid token identifier...

5.3CVSS5.8AI score0.00335EPSS
SaveExploits0References10
Cvelist
Cvelist
added 2026/08/28 10:14 p.m.38 views

CVE-2026-55867 Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/userId/tokens/idOrToken endpoint implemented by UsersResource.revokeToken in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERSTOKENREMOVE...

5.3CVSS0.00335EPSS
SaveExploits0References9
OSV
OSV
added 2026/08/28 10:14 p.m.11 views

CVE-2026-55867 Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/userId/tokens/idOrToken endpoint implemented by UsersResource.revokeToken in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERSTOKENREMOVE...

5.3CVSS5.9AI score
SaveExploits0References11
EUVD
EUVD
added 2026/08/28 10:14 p.m.10 views

EUVD-2026-68014

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/userId/tokens/idOrToken endpoint implemented by UsersResource.revokeToken in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERSTOKENREMOVE...

5.3CVSS5.9AI score0.00335EPSS
SaveExploits0References9
CVE
CVE
added 2026/08/28 10:14 p.m.32 views

CVE-2026-55867

Graylog (a log management platform) is affected in versions 6.2.0 through 6.3.12, 7.0.7, and 7.1.2 . The vulnerability resides in the DELETE /users/{userId}/tokens/{idOrToken} endpoint (UsersResource.revokeToken()), where the USERS_TOKENREMOVE permission is checked against an attacker-controlled ...

5.3CVSS5.9AI score0.00335EPSS
SaveExploits0References9
NVD
NVD
added 2026/08/25 12:16 p.m.11 views

CVE-2026-79664

Ech0 before 4.7.3 fails to properly revoke access tokens created with never-expire option, allowing attackers to maintain perpetual authenticated access after token theft. Three independent revocation mechanisms fail: logout panics on nil ExpiresAt field, RevokeToken skips when remainTTL is zero,...

9.1CVSS0.00217EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/25 11:33 a.m.23 views

CVE-2026-79664

Ech0 versions before 4.7.3 contain an access token revocation bypass. When tokens are created with the never-expire option, three independent revocation mechanisms all fail: the logout handler panics on a nil ExpiresAt field, RevokeToken skips when remainTTL is zero, and the admin delete action d...

9.1CVSS5.4AI score0.00217EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/25 11:33 a.m.7 views

EUVD-2026-65450

Ech0 before 4.7.3 fails to properly revoke access tokens created with never-expire option, allowing attackers to maintain perpetual authenticated access after token theft. Three independent revocation mechanisms fail: logout panics on nil ExpiresAt field, RevokeToken skips when remainTTL is zero,...

9.1CVSS5.4AI score0.00217EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/25 11:33 a.m.7 views

CVE-2026-79664 Ech0 before 4.7.3 Access Token Revocation Bypass

Ech0 before 4.7.3 fails to properly revoke access tokens created with never-expire option, allowing attackers to maintain perpetual authenticated access after token theft. Three independent revocation mechanisms fail: logout panics on nil ExpiresAt field, RevokeToken skips when remainTTL is zero,...

9.1CVSS5.5AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/25 11:33 a.m.30 views

CVE-2026-79664 Ech0 before 4.7.3 Access Token Revocation Bypass

Ech0 before 4.7.3 fails to properly revoke access tokens created with never-expire option, allowing attackers to maintain perpetual authenticated access after token theft. Three independent revocation mechanisms fail: logout panics on nil ExpiresAt field, RevokeToken skips when remainTTL is zero,...

9.1CVSS0.00217EPSS
SaveExploits0References2
Rows per page
Query Builder