CVE-2026-1529

CVE-2026-1529 Keycloak 漏洞利用工具 CVE-2026-1529 ：Keycloak - 通过不当的邀请令牌验证实现未授权组织注册 ⚠️ 警告 ：本工具仅用于教育和授权的安全测试目的。未经授权访问计算机系统是违法的。 📋 目录 概述 功能特性 前提条件 安装 使用方法 配置 工作原理 输出 故障排除 法律声明 贡献 致谢 🎯 概述 本工具演示了 Keycloak 中的一个严重漏洞（CVE-2026-1529），该漏洞允许通过不当的 JWT 邀请令牌验证实现未授权组织注册。该漏洞利用通过操纵邀请令牌来获得对 Keycloak 实例的未授权访问。 漏洞详情： CVE ID...

Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)

Overview On July 14, 2026, Rapid7 and Microsoft disclosed CVE-2026-55040, an authentication bypass vulnerability affecting Microsoft SharePoint. Today we are publishing a technical analysis of the vulnerability along with an accompanying proof-of-concept PoC script. Figure 1: The Rapid7 Labs PoC...

CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)

Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated remote code execution RCE against a vulnerable SharePoint server. Today, both Rapid7 and Microsoft ar...

EUVD-2021-0792

Malware in sbrugna...

IBM Security Verify Access Input Validation Error Vulnerability

IBM Security Verify Access ISAM is a service from IBM USA that improves user access security. The service enables secure and simple access to platforms such as Web, mobile, IoT, and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls,...