jwtear

Jwtear Модульный инструмент командной строки для разбора, создания и манипуляции JSON Web Token JWT токенами с целью тестирования безопасности. Особенности Полная модульность. Все команды — плагины. Легко добавлять новые плагины. Поддержка JWS и JWE токенов. Простой интерфейс для плагинов следуйт...

CVE-2026-29000

JWT/JWE 인증 우회 PoC JWTJSON Web Token와 JWEJSON Web Encryption를 사용하여 인증 우회 취약점을 시연하는 PoCProof-of-Concept 스크립트입니다. 이 도구는 토큰 알고리즘을 부적절하게 검증하여 유효한 JWE 구조에 래핑된 검증되지 않은 JWTalg: none를 수락하는 환경을 악용합니다. 작동 방식 이 공격 체인은 일반적인 암호화 구현 결함을 이용합니다. 1. 키 추출: 스크립트는 대상의 공개적으로 노출된 jwksJSON Web Key Set 엔드포인트에 연결하여 서버의 공개...

CVE-2026-29000

CVE-2026-29000: PoC обхода аутентификации JWT pac4j Подтверждение концепции для CVE-2026-29000 — критическая уязвимость обхода аутентификации в реализации JWT pac4j, позволяющая злоумышленникам создавать поддельные административные токены без действительной подписи. ⚠️ ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ...

PoC_CVE-2025-54887

PoCCVE-2025-54887 이 저장소에는 CVE-2025-54887에 대한 PoCProof-of-Concept 익스플로잇이 포함되어 있습니다. 이는 ruby-jwe버전 = 1.1.0의 취약점으로, 암호화된 JWE의 인증 태그를 무차별 대입brute force할 수 있으며, 이로 인해 기밀성이 손실되고 임의의 JWE를 제작할 수 있는 방법이 제공될 수 있습니다. 라이트업: bloglink 시연 영상: videolink...

CVE-2026-29000

CVE-2026-29000 Lab Java/SparkJava のラボは、CVE-2026-29000 に関連する JWT/JWE 認証の脆弱性をシミュレートします。アプリケーションはポート 4567 で実行され、有効なログインフロー、偽造トークンの作成、ダッシュボードの確認を試すための API を提供します。 CVE 情報 CVE-2026-29000 は、4.5.9、5.7.9、6.3.3 より前のバージョンの pac4j-jwt に影響します。この問題は、暗号化された JWT/JWE を処理する際の JwtAuthenticator...

CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass

CVE-2026-49230 — Apache APISIX jwe-decrypt 인증 우회 Apache APISIX jwe-decrypt 플러그인의 인증 우회 개념 증명입니다. 이 플러그인은 JWE 토큰을 복호화하고 평문을 업스트림으로 전달하여 인증 게이트 역할을 합니다. 그러나 AES-GCM 인증 태그를 전혀 검증하지 않습니다. 유효한 소비자 kid만 있으면 암호문과 태그가 얼마나 가짜든 상관없이 토큰을 수락합니다. 따라서 모든 합법적인 토큰의 헤더에 평문으로 포함되어 있는 소비자 키를 아는 공격자는 AES 시크릿을 모르고도...

JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens

A flaw was found in JWCrypto, a Python library for JSON Web Key JWK, JSON Web Signature JWS, and JSON Web Encryption JWE specifications. An unauthenticated attacker can exploit this vulnerability by sending specially crafted JWE tokens that use ZIP compression. While the input token size is...

JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens

A flaw was found in JWCrypto, a Python library for JSON Web Key JWK, JSON Web Signature JWS, and JSON Web Encryption JWE specifications. An unauthenticated attacker can exploit this vulnerability by sending specially crafted JWE tokens that use ZIP compression. While the input token size is...

CVE-2026-29000-PoC-Exploit

🚀 CVE-2026-29000 - эксплойт обхода аутентификации pac4j-jwt CVE-2026-29000 - создание администратора в один клик через JWT alg:none + JWE-шифрование 📌 Обзор Этот эксплойт задействует CVE-2026-29000 — критическую уязвимость с рейтингом CVSS 10.0 в библиотеке pac4j-jwt. Извлекая открытый JWKS-ключ...

github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

A flaw was found in Go JOSE, a library for handling JSON Web Encryption JWE objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the...

Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-101489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101489 advisory. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web...

github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

A flaw was found in Go JOSE, a library for handling JSON Web Encryption JWE objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the...

OESA-2026-3175 buildah security update

The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...

OESA-2026-3174 buildah security update

The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...

TencentOS Server 3: container-tools:rhel8 (TSSA-2026:0671)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0671 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: container-tools:rhel8 (TSSA-2026:0672)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0672 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2026-45795 Janssen Project: JWE Request Object Signature Verification Bypass in jans-auth-server

The Janssen Project is an open-source identity and access management IAM platform. Prior to 2.0.0, jans-auth-server accepts unsigned JWE request objects because JwtAuthorizationRequest skips inner signature validation when jwe.getSignedJWTPayload returns null, and...

MiracleLinux 8 : container-tools:rhel8 (AXSA:2026-1242:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1242:01 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE:...

Alibaba Cloud Linux 3 : 0187: podman (ALINUX3-SA-2026:0187)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0187 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-25679: url.Parse insufficiently...

PYSEC-2026-1484 JWCrypto vulnerable to JWT bomb Attack in `deserialize` function

Affected version Vendor: https://github.com/latchset/jwcrypto Version: 1.5.5 Description An attacker can cause a DoS attack by passing in a malicious JWE Token with a high compression ratio. When the server processes this Token, it will consume a lot of memory and processing time. Poc python from...