CVE-2025-65945-poc

CVE-2025-65945: node-jws Signature Bypass This is a proof of concept for a signature verification bypass in the node-jws library. The bug lets attackers forge valid JWTs when the server derives HMAC secrets from user-controlled data. What's the bug? The jws.createVerify function doesn't validate...

CVE-2018-0114

CVE-2018-0114 Explotación de una vulnerabilidad en node-jose de Cisco, una biblioteca JavaScript creada para gestionar JWT. Esta vulnerabilidad en node-jose de Cisco permite a un atacante falsificar tokens maliciosos. JWT permite a los usuarios incrustar claves públicas usando el valor jwk dentro...

CVE-2026-29000-PoC

CVE-2026-29000 — pac4j-jwt JwtAuthenticator Authentication Bypass PoC A proof-of-concept for CVE-2026-29000 , an authentication bypass in the pac4j-jwt JwtAuthenticator component CVSS 10.0 , Critical. The script forges a token that impersonates any user with any role — without knowing a single...

CVE-2026-82329-JFrog-Artifactory-

CVE-2026-82329-JFrog-Artifactory- CVE-2026-82329 — JFrog Artifactory Auth Bypass The Vulnerability Critical authentication bypass in JFrog Artifactory versions 7.111.20, 7.117.27, 7.125.19, 7.133.28, 7.146.37, 7.161.19. The flaw allows an unauthenticated attacker to forge a JWT using a blank HMAC...

CVE-2026-53519-PoC

CVE-2026-53519 — Nezha Dashboard Path Traversal & JWT Forgery English | 繁體中文 | 简体中文 This repository contains a Proof-of-Concept PoC exploit for a vulnerability in the Nezha Dashboard that allows unauthenticated path traversal , leading to disclosure of sensitive files including jwtsecretkey and...

CVE-2026-29000

CVE-2026-29000 Lab Java/SparkJava lab simulating JWT/JWE authentication vulnerability related to CVE-2026-29000. The application runs on port 4567 and provides APIs to test valid login flow, forge tokens, and check dashboard. CVE Information CVE-2026-29000 affects pac4j-jwt in versions prior to...

CVE-2026-13447

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-13447 CVE-2026-13447 — WordPress WordPress — MStore API 4.18.4 — inspireui The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing...

CVE-2018-0114

CVE-2018-0114 Exploit for Node-jose 0.11.0 written in Ruby Usage just input victim name into code and run the file via ruby ./exploit.rb A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is...

CVE-2026-82329

CVE-2026-82329 — JFrog Artifactory Unauthenticated Authentication Bypass Mass Exploit -red.svg Critical Authentication Bypass CVSS 9.8 — Actively Exploited in the Wild This tool is a mass exploit for CVE-2026-82329, a vulnerability that allows an unauthenticated attacker with network access to...

CVE-2026-75431_PowerJob_jwt_key_predictable

PowerJob JWT Signing Key Predictable Key Derived from Default JDBC URL → Token Forgery 1. Summary The PowerJob Server's JWT HS256 signing key is derived by BASE64-decoding a hardcoded constant concatenated with the MD5 of the default JDBC URL DefaultSecretProvider / JwtServiceImpl. The JDBC URL i...

TarantuBench

TarantuBench v1 Un benchmark para evaluar agentes de IA en desafíos de seguridad web, generado por el motor de TarantuLabs. ¿Qué es esto? TarantuBench es una colección de 100 aplicaciones web vulnerables, cada una con una bandera oculta TARANTU.... La tarea de un agente es encontrar y extraer la...

CVE-2025-10294

Exploit: Authentication Bypass via Empty ownidsharedsecret JWT Forgery 1 Forge a valid JWT using an empty HMAC key root@kitploit: SUB= SUB="$SUB" python3 - /tmp/jwt.txt import base64, hmac, hashlib, json, time, os b64u = lambda b: base64.urlsafeb64encodeb.rstripb'='.decode header =...

CVE-2025-9209

🍔 RestroPress – Online Food Ordering System 3.0.0 - 3.1.9.2 🛡️ CVE-2025-9209.py — Mass Automatic Exploit & Extraction Tool ⚠️ Vulnerability Overview RestroPress – Online Food Ordering System versions 3.0.0 to 3.1.9.2 are affected by an Unauthenticated Information Exposure leading to Authentication...

CVE-2026-21858

CVE-2026-21858 + CVE-2025-68613 - n8n RCE Exploit Unauthenticated RCE chain for n8n 1.121.0 CVSS 10.0 Attack Chain 1. CVE-2026-21858 - Content-Type confusion → read /home/node/.n8n/config and database.sqlite 2. Extract encryption key and admin credentials from files 3. Forge admin JWT token 4...

CVE-2026-29000

CVE-2026-29000 A proof of concept script for CVE-2026-29000, a critical authentication bypass vulnerability found in the pac4j-jwt library DISCLAIMER This Proof of Concept is for educational and ethical security testing purposes only. It was developed to demonstrate the technical root cause of...

CVE-2026-44351-poc

CVE-2026-44351 — Falsificación de JWT por Secret Vacío en fast-jwt PoC del bypass de autenticación auth bypass en fast-jwt versiones anteriores a 6.2.4 que permite a cualquier atacante no autenticado falsificar JWTs arbitrarios y que sean aceptados como auténticos por la aplicación objetivo...

cve-2026-82329-jfrog-artifactory

CVE-2026-82329 — Bypass de autenticación no autenticado en JFrog Artifactory → toma de control de administrador CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-287 · divulgado el 2026-08-28 · explotado activamente. Un atacante no autenticado y adyacente a la red genera un token de acceso de...

CVE-2026-57147

PraisonAI is a multi-agent teams system. Prior to 0.1.6, praisonaiplatform/services/authservice.py assigns the public dev-secret-change-me value to JWTSECRET when PLATFORMJWTSECRET is unset, and its production guard does not run when PLATFORMENV is also unset because that setting defaults to dev....

CVE-2026-90945

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and execute code on worker nodes...

EUVD-2026-77712

Crawlab through 0.6.3 uses a hard-coded HMAC-SHA256 secret for JWT token signing that cannot be overridden via configuration or environment variables. Unauthenticated attackers can forge valid administrator tokens to access administrative APIs and execute code on worker nodes...