jwt-key-confusion-poc

JWT Key Confusion PoC CVE-2015-9235 Scritto per le sfide Hack The Box - Under Construction e Secret Entrambi gli script inclusi eseguono un attacco di Key Confusion sui Java Web Token CVE-2015-9235. Per eseguire l'attacco è necessario che l'attaccante conosca la chiave pubblica che il server...

ROOT-APP-NPM-CVE-2015-9235 CVE-2015-9235 in jsonwebtoken - Patched by Root

Root has patched CVE-2015-9235 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...

CVE-2015-9235

creationtimestamp| type| source ---|---|--- 2025-01-27 22:00:06+00:00| published-proof-of-concept| Telegram/IIMMVR0y14HHoe0fDF24Y-XgfvnmWXYVKaXhSDz5tV5TerE 2025-01-28 13:54:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/11760 2025-02-05 19:34:25+00:00| published-proof-of-concept...

express-jwt (>=2.0.0, <=2.0.1), maglev (>=3.0.1, <=3.1.1) potentially affected by CVE-2015-9235 via jsonwebtoken (4.0.0)

jsonwebtoken NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jsonwebtoken and may be impacted: - express-jwt =2.0.0, =3.0.1, =3.1.1 Source cves: CVE-2015-9235 Source advisory: OSV:GHSA-C7HR-J4MJ-J2W6...