cve-2022-39227-jwt-auth-bypass-demo

Demo di Bypass dell'Autenticazione JWT CVE-2022-39227 Obiettivo del Progetto Questo progetto dimostra la vulnerabilità CVE-2022-39227 in un ambiente di laboratorio locale controllato. Questa vulnerabilità riguarda la libreria python-jwt versioni 3.3.4 e consente a un attaccante di forgiare i clai...

CVE-2021-44910_SpringBlade

CVE-2021-44910 - Strumento di rilevamento della vulnerabilità SpringBlade Vulnerabilità di autenticazione JWT di SpringBlade. Utilizzo python3 Sono stati utilizzati rispettivamente gli algoritmi "HS256", "HS384", "HS512" per i test...

cve-2026-29000

Exploit CVE-2026-29000 Bypass dell'autenticazione JWT in pac4j-jwt tramite PlainJWT avvolto in JWE Descrizione della vulnerabilità CVE-2026-29000 è una vulnerabilità critica di bypass dell'autenticazione che interessa le versioni di pac4j-jwt precedenti alla 4.5.9, 5.7.9 e 6.3.3. La vulnerabilità...

NextJS-CVE-2025-29927

🔓 NextJS-CVE-2025-29927 - संवेदनशील प्रदर्शन अनुप्रयोग यह एक संवेदनशील Next.js अनुप्रयोग है जो CVE-2025-29927 को प्रदर्शित करता है, जो कि Next.js का उपयोग करने वाले वेब अनुप्रयोगों में अनुचित इनपुट हैंडलिंग या एक्सेस नियंत्रण दोषों के कारण पहचाना गया एक सुरक्षा दोष है। यह परियोजना MySQL बैकएंड और...

krakenhashes

KrakenHashes KrakenHashes é um sistema distribuído de quebra de senhas projetado para profissionais de segurança e red teams. A plataforma coordena recursos de GPU/CPU em múltiplos agentes para realizar quebra de hashes em alta velocidade usando ferramentas como o Hashcat por meio de uma interfac...

CVE-2026-55040

Bypass dell'autenticazione JWT di Microsoft SharePoint CVE-2026-55040 Panoramica CVE-2026-55040.py è uno script proof-of-concept per sfruttare la vulnerabilità di bypass dell'autenticazione di SharePoint, CVE-2026-55040. Per un'analisi tecnica completa, consulta la nostra Analisi Rapid7. Utilizzo...

CVE-2026-66908

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT...

EUVD-2026-64959

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT...

CVE-2026-66908 Apache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT...

safenet-soho-security-framework

SafeNet SOHO Security Framework SafeNet è un framework per Accesso Zero-Trust alla Rete ZTNA di livello produttivo, progettato specificamente per ambienti Small Office/Home Office SOHO. Orchestrando un overlay VPN sicuro e consapevole dell'identità che utilizza il protocollo WireGuard , SafeNet...

CVE-2026-53548

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.6.1, the GET /host/db/host/:id/password endpoint in src/backend/database/routes/host.ts accepts an authenticated user's numeric host ID and the field=password or...

CVE-2026-53548 Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other users

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.6.1, the GET /host/db/host/:id/password endpoint in src/backend/database/routes/host.ts accepts an authenticated user's numeric host ID and the field=password or...

CVE-2026-53548 Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other users

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.6.1, the GET /host/db/host/:id/password endpoint in src/backend/database/routes/host.ts accepts an authenticated user's numeric host ID and the field=password or...

CVE-2026-76216 Vikunja through 2.4.0 Principal-Type Confusion via LinkSharing

Vikunja through 2.4.0 contains a principal-type confusion vulnerability where LinkSharing principals with id N are treated as user principals with users.id == N at three permission checks lacking type guards. Attackers with a link-share JWT can remove victims from teams, enumerate and delete vict...

CVE-2026-19017

A flaw was found in Consul. A privileged attacker with operator:write permission can exploit a partial arbitrary file read vulnerability when Consul is configured to use the Vault Connect CA provider with JWT or AppRole authentication. This allows the attacker to direct Consul to read and forward...

CVE-2026-50561 Yuxi has a JWT Authentication Bypass Leading to Cross-Instance Administrator Token Reuse

Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a flaw. In affected versions, the system does not sufficiently validate the identity token in the Authorization header —...

CVE-2026-50561

Summary: CVE-2026-50561 affects Yuxi prior to 0.6.2 where the Authorization header token is only authenticated for validity, not validated across deployments. This enables an administrator token from one deployment or local test environment to gain access to the backend management interfaces of a...

CVE-2026-73085 Audiobookshelf: Refresh Token Accepted on Resource Endpoints

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/TokenManager.js treats JWTs with the refresh token type as bearer access tokens on API and WebSocket resource endpoints such as /api/me instead of restricting them to...

PT-2026-70359

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/TokenManager.js treats JWTs with the refresh token type as bearer access tokens on API and WebSocket resource endpoints such as /api/me instead of restricting them to...

CVE-2026-19017

Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT or AppRole authentication. A privileged attacker with operator:write permission may direct Consul to read and forward...