CVE-2026-29000

CVE-2026-29000: Proof of Concept PoC per il Bypass dell'Autenticazione in pac4j-jwt ⚠️ Disclaimer Questo strumento è destinato esclusivamente a test di sicurezza etici ed educativi. Non supporto e non supporterò attività dannose in alcun modo, forma o maniera. Usalo a tuo rischio. Questo è anche i...

CVE-2026-29000-Python-PoC-pac4j-JWT-AuthenticationBypass-Poc

CVE-2026-29000 – Bypass dell'autenticazione JWT in pac4j PoC Python Proof‑of‑Concept in Python per CVE‑2026‑29000 , un bypass critico dell'autenticazione che colpisce le applicazioni che utilizzano il modulo JWT di pac4j. La vulnerabilità consente agli attaccanti di autenticarsi come utenti...

cve-2026-29000

Exploit CVE-2026-29000 Bypass dell'autenticazione JWT in pac4j-jwt tramite PlainJWT avvolto in JWE Descrizione della vulnerabilità CVE-2026-29000 è una vulnerabilità critica di bypass dell'autenticazione che interessa le versioni di pac4j-jwt precedenti alla 4.5.9, 5.7.9 e 6.3.3. La vulnerabilità...

CVE-2026-29000

CVE-2026-29000 — pac4j-jwt JWE Authentication Bypass CTF-Lab zur Untersuchung der JWE-Authentifizierungsschwachstelle in der Bibliothek pac4j-jwt CVSS 9.3 Critical · CWE-287 · Betroffen: pac4j-jwt ← Zugriff auf Admin-Panel ↓ Sensible Daten lesen: Mitarbeiterliste, Systemkonfiguration, Flag...

CVE-2026-29000

CVE-2026-29000 Exploit Generator Rust Dieses Repository enthält eine spezialisierte Rust-Implementierung zur Ausnutzung von CVE-2026-29000, einer Authentifizierungs-Bypass-Schwachstelle in pac4j-jwt. Die Schwachstelle beruht auf einem „Signature Validation Skip", wenn ein PlainJWT alg: none in...

PT-2026-82800

A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token can force the JWE.deserialize function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of...

CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass

CVE-2026-49230 — Contournement d'authentification dans Apache APISIX jwe-decrypt Preuve de concept d'un contournement d'authentification dans le plugin Apache APISIX jwe-decrypt. Ce plugin déchiffre un jeton JWE et transmet son texte clair à l'amont, agissant comme une porte d'authentification —...

JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens

A flaw was found in JWCrypto, a Python library for JSON Web Key JWK, JSON Web Signature JWS, and JSON Web Encryption JWE specifications. An unauthenticated attacker can exploit this vulnerability by sending specially crafted JWE tokens that use ZIP compression. While the input token size is...

JWCrypto: python-cryptography: python: JWCrypto: Memory exhaustion via crafted compressed JWE tokens

A flaw was found in JWCrypto, a Python library for JSON Web Key JWK, JSON Web Signature JWS, and JSON Web Encryption JWE specifications. An unauthenticated attacker can exploit this vulnerability by sending specially crafted JWE tokens that use ZIP compression. While the input token size is...

github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

A flaw was found in Go JOSE, a library for handling JSON Web Encryption JWE objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the...

Unity Linux 20.1070a Security Update: osbuild-composer (UTSA-2026-101489)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101489 advisory. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web...

github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object

A flaw was found in Go JOSE, a library for handling JSON Web Encryption JWE objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the...

OESA-2026-3174 buildah security update

The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...

OESA-2026-3175 buildah security update

The package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a new image...

TencentOS Server 3: container-tools:rhel8 (TSSA-2026:0671)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0671 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 3: container-tools:rhel8 (TSSA-2026:0672)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0672 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2026-45795 Janssen Project: JWE Request Object Signature Verification Bypass in jans-auth-server

The Janssen Project is an open-source identity and access management IAM platform. Prior to 2.0.0, jans-auth-server accepts unsigned JWE request objects because JwtAuthorizationRequest skips inner signature validation when jwe.getSignedJWTPayload returns null, and...

MiracleLinux 8 : container-tools:rhel8 (AXSA:2026-1242:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1242:01 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE:...

Alibaba Cloud Linux 3 : 0187: podman (ALINUX3-SA-2026:0187)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0187 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-25679: url.Parse insufficiently...

PYSEC-2026-1484 JWCrypto vulnerable to JWT bomb Attack in `deserialize` function

Affected version Vendor: https://github.com/latchset/jwcrypto Version: 1.5.5 Description An attacker can cause a DoS attack by passing in a malicious JWE Token with a high compression ratio. When the server processes this Token, it will consume a lot of memory and processing time. Poc python from...