CVE-2026-29000

이 저장소에는 README가 없습니다...

Principal-HackTheBox

HackTheBox — Principal 난이도: 중간 OS: Linux 플랫폼: HackTheBox 개요 pac4j-jwt v6.0.3을 실행하는 웹 애플리케이션 — CVE-2026-29000에 취약합니다. 공개 RSA 키는 JWKS 엔드포인트를 통해 인증 없이 노출되며, 이를 사용하여 유효한 관리자 JWE 토큰을 위조하여 인증을 완전히 우회할 수 있습니다. 관리자 액세스 권한으로 설정 API에서 평문 SSH 자격 증명을 획득합니다. 서비스 계정은 deployers 그룹의 구성원이며 sshd가 신뢰하는 SSH CA 개인 키에...

Exploit for CVE-2026-29000

Lab Demo CVE-2026-29000: pac4j-jwt Authentication Bypass Môi...

Exploit for CVE-2026-29000

CVE-2026-29000: pac4j JWT Authentication Bypass PoC Proof...

Exploit for CVE-2026-29000

🚀 CVE-2026-29000 - pac4j-jwt Authentication Bypass Exploit !...

Exploit for CVE-2026-29000

CVE-2026-29000-pac4j-jwt-auth-byp...

Exploit for CVE-2026-29000

cve-2...

Exploit for CVE-2026-29000

CVE-2026-29000 — pac4j-jwt PlainJWT-in-JWE Authentication Bypa...

Exploit for CVE-2026-29000

CVE-2026-29000 - pac4j-jwt Authentication Bypass PoC Not...

CVE-2026-29000

pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT wi...

CVE-2026-29000

creationtimestamp| type| source ---|---|--- 2026-03-04 22:17:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgbcrw7c2u2s 2026-03-05 00:43:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgbkx4u4ue2v 2026-03-05 03:00:29+00:00| seen|...

CVE-2026-29000 pac4j-jwt JwtAuthenticator Authentication Bypass

pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT wi...