70 matches found
jwt-key-id-injector
Инжектор идентификатора ключа JWT Простой скрипт на Python для проверки гипотетической уязвимости JWT. Допустим, есть приложение, которое использует JWT-токены, подписанные алгоритмом HS256. Пример токена выглядит следующим образом: root@kitploit:...
Alibab-Nacos-Unauthorized-Reset-PWD
Воздействие уязвимости Обнаружена проблема в Nacos, затрагивающая Nacos = 2.2.0. Если пользователь использует ключ JWT по умолчанию, это позволяет злоумышленнику сбросить пароль любого пользователя и получить контроль над его учётной записью. Уязвимый продукт Версия Nacos = 2.2.0 Воспроизведение...
Alibab-Nacos-Unauthorized-Login
Воздействие уязвимости Обнаружена проблема в Nacos, затрагивающая Nacos = 2.1.0. Пользователи Nacos используют ключ JWT по умолчанию, что приводит к уязвимости несанкционированного доступа. Через эту уязвимость злоумышленники могут обойти аутентификацию по имени пользователя и паролю и напрямую...
CVE-2025-8625
CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Отсутствие настраиваемого секрета JWT и проверки типа файлов, ведущее к неаутентифицированному удалённому выполнению кода 🛡️ Copypress Rest API 1.1 - 1.2 RCE-эксплойт 📝 Описание Плагин Copypress Rest API для WordPress версии с 1.1 по 1.2 уязвим к...
EUVD-2026-78838
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...
CVE-2026-89026 Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...
CVE-2026-89026
Issabel Framework (web framework for Issabel PBX) contained a hard-coded HS256 JWT signing key in pbxapi/index.php, identical across all installations. Unauthenticated attackers could forge valid bearer tokens and call /pbxapi/manager/originate with the System application parameter, causing Aster...
CVE-2026-89026 Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...
VulnCheck KEV: CVE-2026-89026
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. Attackers c...
PT-2026-85685
PowerJob Server version 5.1.2 and likely earlier uses a predictable JWT signing key for HS256-based authentication. This allows a remote attacker to execute arbitrary code...
CVE-2026-75431
PowerJob Server version 5.1.2 and likely earlier uses a predictable JWT signing key for HS256-based authentication. This allows a remote attacker to execute arbitrary code...
CVE-2026-75431
PowerJob Server version 5.1.2 and likely earlier uses a predictable JWT signing key for HS256-based authentication. This allows a remote attacker to execute arbitrary code...
EUVD-2026-67854
SpringBlade versions 2.7.3 through 3.5.0 contain a privilege escalation vulnerability that allows authenticated attackers to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via @RestController without...
PT-2026-83258
Name of the Vulnerable Software and Affected Versions SpringBlade versions 2.7.3 through 4.9.9 Description Authenticated attackers can escalate privileges to create system administrator accounts by sending crafted POST requests to an unprotected internal Feign user-creation endpoint exposed via...
CVE-2026-59335
Cloud Foundry UAA is affected by an authorization bypass (CWE-178) in its Identity Zone Endpoint . The root cause is a mismatch between the application's case-sensitive zone identifier comparison and MySQL's case-insensitive default collation: an attacker holding only zones.write can reference th...
CVE-2026-18500 @fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key
@fastify/jwt is a JSON Web Token plugin for Fastify. In versions before 10.2.2, a per-request verification key passed to request.jwtVerify key is silently overridden by the plugin's globally configured secret, because the option merge applies the global key last. Applications that use different...
CVE-2026-18500 @fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key
@fastify/jwt is a JSON Web Token plugin for Fastify. In versions before 10.2.2, a per-request verification key passed to request.jwtVerify key is silently overridden by the plugin's globally configured secret, because the option merge applies the global key last. Applications that use different...
Crawl4AI: authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server
Crawl4AI before 0.8.7 contains an authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server. Attackers who know the default key can forge valid authentication tokens for any user, bypassing authentication and gaining full access to protected...
CVE-2025-15603
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor explains: "The 't0p-s3cr3t' default was dead code on every supported startup path: start.sh, startwindows.ba...