LEAKEY

LEAKEY 🔑 LEAKEY is a tool is for validation of leaked API tokens/keys found during pentesting and Red Team Enegagments. The script is really useful for Bug Hunters inorder to validate and determine the impact of leaked credentials. LEAKEY uses a json based signature file located at...

CVE-2020-28874

This repository contains the description of the vulnerability found CVE-2020-28874 in ProjectSend r1270 release. Thank you to my colleagues from Entelgy Innotec Security for pushing me to improve! CVE-2020-28874: Privilege Escalation Description The vulnerability is in the reset password componen...

CVE-2026-46455

CVE-2026-46455 — camel-keycloak Missing ISACTIVE Check Expired Tokens Accepted Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-keycloak 4.18.2 Cam...

cs50-cyber-paloalto-oauth

CS50 Cybersecurity Final Project Title: The Salesloft OAuth Breach & CVE-2024-3400 Palo Alto impact Author: Yafiya Darwesh GitHub: Yafiah-Darwesh YouTube video: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 Files presentation.pdf — slides script.txt — speaker notes Summary...

CVE-2025-50433

CVE-2025-50433 — Critical Account Takeover Vulnerability Affecting Monnit Cloud Platforms .imonnit.com Summary A critical authentication vulnerability exists across .imonnit.com that allows full Account Takeover ATO on any user account without victim interaction. The backend fails to validate the...

CVE-2026-87879

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87103

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87101

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87102

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87879

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87879

The software Acronis Cyber Protect 17 on Linux and Windows is vulnerable to a sensitive information disclosure due to improper token validation . This issue is associated with CWE-347 (Improper Verification of Cryptographic Signature). The vulnerability affects versions prior to build 42587 . Acc...

EUVD-2026-111989

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87102

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87102

The software Acronis Cyber Protect 17 for Linux and Windows is affected by a vulnerability (CVE-2026-87102) occurring in versions before build 42587 . The root cause is improper token validation , which can lead to sensitive information disclosure and manipulation . According to the provided metr...

EUVD-2026-111987

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87103

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87103

The Acronis Cyber Protect 17 product (Linux and Windows) is vulnerable to sensitive information disclosure and manipulation due to improper token validation . This flaw is categorized under CWE-347 (Improper Verification of Cryptographic Signature). The vulnerability impacts versions prior to bui...

EUVD-2026-111982

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87101

Sensitive information disclosure due to improper token validation. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 42587...

CVE-2026-87101

Acronis Cyber Protect 17 for Linux and Windows is vulnerable to sensitive information disclosure prior to build 42587 . The root cause is identified as improper token validation , specifically relating to CWE-347 (Improper Verification of Cryptographic Signature) . This vulnerability allows for t...