cve-2022-39227-jwt-auth-bypass-demo

CVE-2022-39227 Demostración de Bypass de Autenticación JWT Objetivo del proyecto Este proyecto demuestra la vulnerabilidad CVE-2022-39227 en un entorno de laboratorio local controlado. Esta vulnerabilidad afecta a la biblioteca python-jwt versiones 3.3.4 y permite a un atacante falsificar claims...

CVE-2026-55040

Omisión de Autenticación JWT de Microsoft SharePoint CVE-2026-55040 Resumen CVE-2026-55040.py es un script de prueba de concepto para explotar la vulnerabilidad de omisión de autenticación de SharePoint, CVE-2026-55040. Para un análisis técnico completo, consulte nuestro Análisis de Rapid7. Uso...

cve-2026-29000

Exploit CVE-2026-29000 Omisión de autenticación JWT en pac4j-jwt mediante PlainJWT envuelto en JWE Descripción de la vulnerabilidad CVE-2026-29000 es una vulnerabilidad crítica de omisión de autenticación que afecta a las versiones de pac4j-jwt anteriores a 4.5.9, 5.7.9 y 6.3.3. La vulnerabilidad...

Linux Distros Unpatched Vulnerability : CVE-2026-25554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS versions 3.1 before 3.6.4 containing the authjwt module prior to commit 3822d33 contain a SQL injection vulnerability in the jwtdbauthorize function in...

CVE-2026-50561

Summary: CVE-2026-50561 affects Yuxi prior to 0.6.2 where the Authorization header token is only authenticated for validity, not validated across deployments. This enables an administrator token from one deployment or local test environment to gain access to the backend management interfaces of a...

CVE-2026-50561 Yuxi has a JWT Authentication Bypass Leading to Cross-Instance Administrator Token Reuse

Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a flaw. In affected versions, the system does not sufficiently validate the identity token in the Authorization header —...

CVE-2023-27584

Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native Computing Foundation CNCF as an Incubating Level Project. Dragonfly uses JWT to verify user. However, the secret key for JWT, "Secret Key", is hard coded, which leads to...

CVE-2023-33236

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs...