CVE-2026-73208

An attacker that holds a token intended for a different purpose can authenticate, because when an OAuth2 token response does not contain a scope claim, the audience claim is used in its place and checked against the configured required scopes. These are different concepts, and the audience claim...

CVE-2026-40205

An attacker that holds an OAuth2 token granting only part of the required scopes can authenticate, because when more than one scope is required in the configuration, the remote token validation paths accept a token that carries only one of them, while the local token validation path correctly...

ownCloud Guests - User Enumeration

ownCloud Guests before 0.12.5 contains an unauthenticated user enumeration vulnerability caused by insufficient validation of the token in showPasswordForm at /apps/guests/register/email/token, letting unauthenticated attackers enumerate valid guest users, exploit requires no authentication. id:...

CVE-2020-28874

Dieses Repository enthält die Beschreibung der gefundenen Sicherheitslücke CVE-2020-28874 in der Version r1270 von ProjectSend. Vielen Dank an meine Kollegen von Entelgy Innotec Security, die mich dazu angespornt haben, besser zu werden! CVE-2020-28874: Privilege Escalation Beschreibung Die...

EUVD-2026-67289

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An attacker may replay or manipulate authentication tokens to gain unauthorized access to administrative functionality...

LEAKEY

LEAKEY 🔑 LEAKEY è uno strumento per la validazione di token/chiavi API trapelati trovati durante penetration test e attività di Red Team. Lo script è molto utile per i Bug Hunter per validare e determinare l'impatto di credenziali trapelate. LEAKEY utilizza un file di firma basato su JSON situato...

CVE-2026-46455

CVE-2026-46455 — camel-keycloak controllo ISACTIVE mancante token scaduti accettati Reproducer proof-of-concept eseguibili per la stessa vulnerabilità di Apache Camel, uno per runtime:...

EUVD-2026-67144

FrontAccounting through 2.4.20 generates a CSRF token in endform in includes/ui/uicontrols.inc and embeds it as the token hidden field in every form it renders, but only admin/users.php and admin/changecurrentuserpassword.php call checkcsrftoken to validate it. No financial transaction handler...

CVE-2018-0114

CVE-2018-0114 Sfruttamento di una vulnerabilità nel node-jose di Cisco, una libreria JavaScript creata per gestire i JWT. Questa vulnerabilità nel node-jose di Cisco consente a un attaccante di falsificare token malevoli. JWT consente agli utenti di incorporare chiavi pubbliche usando il valore j...

CVE-2026-36956

CVE-2026-36956: Cross-Site Request Forgery CSRF nell'interfaccia di gestione web ID CVE: CVE-2026-36956 Data: 2026-04-29 Scopritore: Kirubel Solomne Vendor: Shenzhen Dibit Network Equipment Co., Ltd. Prodotto: Router Dbit Versione Firmware: V1.0.0 CWE: CWE-352 - Cross-Site Request Forgery CSRF...

CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation

Strumento di Exploit per CVE-2026-1529 Keycloak Keycloak: registrazione non autorizzata di organizzazioni tramite validazione impropria del token di invito Disclaimer Questo strumento è destinato esclusivamente a scopi educativi e di test di sicurezza. Utilizzalo solo su sistemi per cui hai...

CVE-2026-1529

Ferramenta de Exploração CVE-2026-1529 Keycloak CVE-2026-1529 : Keycloak - Registro não autorizado de organização via validação inadequada de token de convite ⚠️ AVISO : Esta ferramenta é apenas para fins educacionais e de testes de segurança autorizados. O acesso não autorizado a sistemas de...

CVE-2025-50433

CVE-2025-50433 — Vulnerabilidade Crítica de Apropriação de Conta que Afeta as Plataformas Monnit Cloud .imonnit.com Resumo Existe uma vulnerabilidade crítica de autenticação em .imonnit.com que permite a apropriação total de conta ATO em qualquer conta de usuário sem interação da vítima. O backen...

CVE-2026-78887

A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation can lead to incorrect authorization. The attack can be launched remotely. This attack is characterized by high...

EUVD-2026-65475

A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation can lead to incorrect authorization. The attack can be launched remotely. This attack is characterized by high...

CVE-2026-78887 liketrek TREK Journey Photo Proxy validateShareTokenForAsset authorization

A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation can lead to incorrect authorization. The attack can be launched remotely. This attack is characterized by high...

cs50-cyber-paloalto-oauth

Progetto Finale di Cybersecurity CS50 Titolo: La violazione OAuth di Salesloft e CVE-2024-3400 impatto Palo Alto Autore: Yafiya Darwesh GitHub: Yafiah-Darwesh Video YouTube: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 File presentation.pdf — diapositive script.txt — note p...

CVE-2026-57944

AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in channelToGallery.json.php that allows attackers to modify site-wide Gallery configuration by performing unauthorized writes to plugin data. Attackers can craft a cross-site GET request carrying an administrator'...

CVE-2026-57944 AVideo channelToGallery.json.php Cross-Site Request Forgery

AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in channelToGallery.json.php that allows attackers to modify site-wide Gallery configuration by performing unauthorized writes to plugin data. Attackers can craft a cross-site GET request carrying an administrator'...

CVE-2026-64961 Authentication Bypass in ATutor

ATutor is vulnerable to authentication bypass . Although a token validation check is present in the auto-login functionality, the values required for token validation remain uninitialized in certain code paths. An unauthenticated attacker who can determine a user's identifier and registration...