krakenhashes

KrakenHashes KrakenHashes is a distributed password cracking system designed for security professionals and red teams. The platform coordinates GPU/CPU resources across multiple agents to perform high-speed hash cracking using tools like Hashcat through a secure web interface. Think of KrakenHash...

CVE-2021-44910_SpringBlade

CVE-2021-44910-SpringBlade Vulnerability Detection Tool SpringBlade JWT authentication vulnerability. Usage python3 Tested with HS256, HS384, and HS512 algorithms respectively...

NextJS-CVE-2025-29927

Voici un fichier README.md propre et informatif pour votre dépôt GitHub qui explique qu'il s'agit d'une application Next.js vulnérable pour CVE-2025-29927 et inclut un lien vers votre vidéo YouTube de configuration : 🔓 NextJS-CVE-2025-29927 - Application de démonstration vulnérable Il s'agit d'un...

cve-2022-39227-jwt-auth-bypass-demo

CVE-2022-39227 JWT Authentication Bypass Demo Цель проекта Этот проект демонстрирует уязвимость CVE-2022-39227 в контролируемой локальной лабораторной среде. Эта уязвимость затрагивает библиотеку python-jwt версии 3.3.4 и позволяет атакующему подделывать утверждения JWT claims без знания секретно...

safenet-soho-security-framework

SafeNet – Framework de Sécurité SOHO SafeNet est un framework Zero-Trust Network Access ZTNA de qualité production, spécialement conçu pour les environnements Small Office/Home Office SOHO. En orchestrant un overlay VPN sécurisé et conscient de l'identité utilisant le protocole WireGuard , SafeNe...

CVE-2026-5430

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-5430 CVE-2026-5430 WSO2 API Manager 4.5.0 — WSO2 Механизм аутентификации JWT принимает токены, подписанные алгоритмами, отличными от явно настроенных или поддерживаемых. Это позволяет злоумышленнику создать JWT с неподдерживаемым...

CVE-2026-55040

Обход аутентификации JWT в Microsoft SharePoint CVE-2026-55040 Обзор CVE-2026-55040.py — это скрипт, подтверждающий концепцию proof-of-concept, для эксплуатации уязвимости обхода аутентификации SharePoint, CVE-2026-55040. Полный технический анализ см. в нашем анализе Rapid7. Использование $ pytho...

cve-2026-29000

Эксплойт CVE-2026-29000 Обход аутентификации JWT в pac4j-jwt через JWE-обёрнутый PlainJWT Описание уязвимости CVE-2026-29000 — это критическая уязвимость обхода аутентификации, затрагивающая pac4j-jwt версий ниже 4.5.9, 5.7.9 и 6.3.3. Уязвимость позволяет удалённым злоумышленникам подделывать...

CVE-2026-93355

LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the emailverified claim...

CVE-2026-93355 LiteLLM Weak JWT Authentication via Email-Based User Lookup

LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the emailverified claim...

CVE-2026-93355 LiteLLM Weak JWT Authentication via Email-Based User Lookup

LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the emailverified claim...

CVE-2026-93355

The LiteLLM platform is vulnerable to a weak JWT authentication flaw caused by an email-based fallback lookup that fails to verify the email_verified claim. An attacker with a valid JWT from a configured identity provider can authenticate as any existing user by using an unverified email address ...

CVE-2026-93355 LiteLLM Weak JWT Authentication via Email-Based User Lookup

LiteLLM contains a weak authentication vulnerability that allows an attacker holding a valid JWT from the configured identity provider to authenticate as any existing user by exploiting an email-based fallback lookup in the JWT authentication flow without verifying the emailverified claim...

PT-2026-102338

Name of the Vulnerable Software and Affected Versions LiteLLM affected versions not specified Description A weak authentication issue exists in the JWT authentication flow. An attacker with a valid JSON Web Token JWT from the configured identity provider can authenticate as any existing user by...

Exploit for Improper Verification of Cryptographic Signature in Wso2 Api_Control_Plane

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-89027

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplying a specific GET parameter without any capability check or...

CVE-2026-89027 miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplying a specific GET parameter without any capability check or...

CVE-2026-89027 miniOrange JWT Authentication for WP REST APIs < 4.8.0 Authentication Downgrade

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplying a specific GET parameter without any capability check or...

PT-2026-93110

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplying a specific GET parameter without any capability check or...

CVE-2026-89027: Missing Authentication for Critical Function

miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0 contains an authentication method downgrade vulnerability that allows unauthenticated attackers to bypass administrator-configured authentication by supplying a specific GET parameter without any capability check or...