CVE-2025-65945-poc

CVE-2025-65945: node-jws Signature Bypass This is a proof of concept for a signature verification bypass in the node-jws library. The bug lets attackers forge valid JWTs when the server derives HMAC secrets from user-controlled data. What's the bug? The jws.createVerify function doesn't validate...

TarantuBench

TarantuBench v1 A benchmark for evaluating AI agents on web security challenges, generated by the TarantuLabs engine. What is this? TarantuBench is a collection of 100 vulnerable web applications, each containing a hidden flag TARANTU.... An agent's job is to find and extract the flag by...

CVE-2026-53519-PoC

CVE-2026-53519 — Nezha Dashboard Path Traversal & JWT Forgery English | 繁體中文 | 简体中文 This repository contains a Proof-of-Concept PoC exploit for a vulnerability in the Nezha Dashboard that allows unauthenticated path traversal , leading to disclosure of sensitive files including jwtsecretkey and...

CVE-2026-29000-PoC

CVE-2026-29000 — pac4j-jwt JwtAuthenticator Authentication Bypass PoC A proof-of-concept for CVE-2026-29000 , an authentication bypass in the pac4j-jwt JwtAuthenticator component CVSS 10.0 , Critical. The script forges a token that impersonates any user with any role — without knowing a single...

CVE-2026-82454

CVE-2026-82454 is a CRITICAL authentication bypass in the Omnivore API (packages/api), affecting versions before android-0.227.0 . The decodeAppleToken function extracted the alg field from an attacker-supplied JWT header and passed it as the sole allowed algorithm to jwt.verify(). Because jsonwe...

CVE-2026-29000

Laboratório CVE-2026-29000 Laboratório Java/SparkJava que simula a falha de autenticação JWT/JWE relacionada à CVE-2026-29000. A aplicação roda na porta 4567 e fornece APIs para testar o fluxo de login válido, criar tokens forjados e verificar o dashboard. Informações da CVE A CVE-2026-29000 afet...

CVE-2018-0114

CVE-2018-0114 Sfruttamento di una vulnerabilità nel node-jose di Cisco, una libreria JavaScript creata per gestire i JWT. Questa vulnerabilità nel node-jose di Cisco consente a un attaccante di falsificare token malevoli. JWT consente agli utenti di incorporare chiavi pubbliche usando il valore j...

CVE-2026-56100

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

EUVD-2026-67854

SpringBlade versions 2.7.3 through 3.5.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestController without...

CVE-2026-56100 SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

CVE-2026-56100 SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

CVE-2026-56100

SpringBlade versions 2.7.3 through 3.5.0 are affected by a privilege escalation vulnerability in an internal Feign user-creation endpoint exposed via @RestController without authorization checks. The gateway's authentication filter only validates JWT parsing without verifying user roles or caller...

CVE-2026-56100 SpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint

SpringBlade versions from 2.7.3 up to but not including 5.0.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestControll...

CVE-2025-9209

🍔 RestroPress – ऑनलाइन खाद्य आदेश प्रणाली 3.0.0 - 3.1.9.2 🛡️ CVE-2025-9209.py — बड़े पैमाने पर स्वचालित शोषण एवं निष्कर्षण उपकरण ⚠️ भेद्यता अवलोकन RestroPress – ऑनलाइन खाद्य आदेश प्रणाली संस्करण 3.0.0 से 3.1.9.2 एक अप्रमाणित सूचना प्रकटीकरण से प्रभावित हैं जो जाली JWT के माध्यम से प्रमाणीकरण बाइपास...

CVE-2018-0114

CVE-2018-0114 Exploit per Node-jose 0.11.0 scritto in Ruby Utilizzo inserisci semplicemente il nome della vittima nel codice ed esegui il file tramite ruby ./exploit.rb Una vulnerabilità nella libreria open source Cisco node-jose precedente alla versione 0.11.0 potrebbe consentire a un attaccante...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - Exploit RCE per n8n Catena RCE non autenticata per n8n 1.121.0 CVSS 10.0 Catena di attacco 1. CVE-2026-21858 - Confusione del Content-Type → lettura di /home/node/.n8n/config e database.sqlite 2. Estrazione della chiave di crittografia e delle credenziali admin...

CVE-2026-29000

CVE-2026-29000 Uno script proof of concept per CVE-2026-29000, una vulnerabilità critica di bypass dell'autenticazione trovata nella libreria pac4j-jwt DISCLAIMER Questa Proof of Concept è destinata esclusivamente a scopi di test di sicurezza etici ed educativi. È stata sviluppata per dimostrare ...

CVE-2025-10294

Exploit: Bypass de Autenticação via ownidsharedsecret Vazio Falsificação de JWT 1 Forje um JWT válido usando uma chave HMAC vazia root@kitploit: SUB= SUB="$SUB" python3 - /tmp/jwt.txt import base64, hmac, hashlib, json, time, os b64u = lambda b: base64.urlsafeb64encodeb.rstripb'='.decode header =...

CVE-2026-59335

Improper handling of case sensitivity CWE-178 in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker holding only the zones.write authority to bypass the intended restriction that this authority does not grant access to t...

CVE-2026-59335 Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise

Improper handling of case sensitivity CWE-178 in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote authenticated attacker holding only the zones.write authority to bypass the intended restriction that this authority does not grant access to t...