Lucene search
+L

83 matches found

Kitploit
Kitploit
added 2026/09/14 6:18 a.m.10 views

jwt_tool

The JSON Web Token Toolkit v2 jwttool.py は、JWT JSON Web Tokens の検証、偽造、スキャン、改ざんを行うためのツールキットです。 主な機能は次のとおりです: トークンの有効性の確認 既知のエクスプロイトのテスト: CVE-2015-2951 alg=none 署名バイパスの脆弱性 CVE-2016-10555 RS/HS256 公開鍵不一致の脆弱性 CVE-2018-0114 Key injection 脆弱性 CVE-2019-20933/CVE-2020-28637 Blank password 脆弱性...

5CVSS7.1AI score0.03773EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.325 views

OpenMetadata - Authentication Bypass

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The JwtFilter handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request...

9.8CVSS8.1AI score0.73255EPSS
SaveExploits5References5
Kitploit
Kitploit
added 2026/09/10 1:36 a.m.15 views

CVE-2026-29000-Lab

CVE-2026-29000 — pac4j-jwt 库级 PoC 实验室 概述 本仓库包含针对 pac4j-jwt 中 CVE-2026-29000 的库级 PoC 。 它通过两个用例对比了存在漏洞的版本与已修复版本的行为: 基线测试 :合法令牌应被接受 攻击测试 :伪造令牌在存在漏洞的版本上应被接受,在已修复版本上应被拒绝 版本| 基线测试| 攻击测试| 结果 ---|---|---|--- 6.0.3| ✅| ✅| 存在漏洞 6.0.4.1| ✅| ✅| 存在漏洞 6.3.3| ✅| ❌| 已修复 本 PoC...

9.3CVSS7.4AI score0.05856EPSS
SaveExploits17References1
Kitploit
Kitploit
added 2026/09/10 12:56 a.m.11 views

CVE-2026-30863-Exploit

CVE-2026-30863 – Parse Server JWT 受众验证 受影响版本 Parse Server 8.6.10 和 9.5.0-alpha.11 受影响组件 Google 认证适配器(GoogleAuthAdapter) Apple 认证适配器(AppleAuthAdapter) Facebook 认证适配器(FacebookAuthAdapter) 根本原因 当适配器配置为未 设置受众参数(Google/Apple 的 clientId,Facebook 的 appIds)时,底层 JWT 验证(使用 jsonwebtoken 或类似工具)会跳过 audience...

9.8CVSS5.9AI score0.00525EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 2:42 a.m.11 views

CVE-2026-71206-PoC

CVE-2026-71206 — Shiori:JWT CheckToken 从不重新验证账户状态 产品:go-shiori/shiori 文件:internal/domains/auth.go CWE:CWE-613 — 会话过期不充分 CVSS 3.1:AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L — 8.2(高危) CNA:Turan Security · CVE 记录 描述 Shiori 的 CheckToken 函数(internal/domains/auth.go)仅验证 JWT 的 HMAC 签名,并原样返回嵌入的 claims.Account...

8.3CVSS5.9AI score0.0028EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/07 11:41 p.m.7 views

CVE-2026-66908

CVE-2026-66908 — camel-platform-http-main 未校验 JWT iss/aud 针对 Apache Camel 漏洞的可运行 PoC 复现工具:当未配置 jwtIssuer 或 jwtAudience 时,camel-main 内嵌 HTTP 服务器 仅凭密钥库构建其 JWT 认证器,因此入站令牌仅检查签名和过期时间 ——iss 和 aud 声明从未被校验。 运行时| 目录| 技术栈 ---|---|--- Camel Main (独立运行)| camel-main/| camel-main 4.21.0 +...

7.5CVSS5.9AI score0.00409EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/08/31 4:23 a.m.9 views

CVE-2026-66908

A flaw was found in the Apache Camel Platform HTTP Main component. When JSON Web Token JWT authentication is configured with a keystore but without specifying an issuer or audience, the system fails to validate the 'iss' and 'aud' claims. This improper authentication allows an attacker to use any...

8.2CVSS5.8AI score0.00409EPSS
SaveExploits1References4
OSV
OSV
added 2026/08/24 8:17 p.m.7 views

DEBIAN-CVE-2026-75509

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to version 1.7.3, JWTClaimsRegistry applies membership matching to list-valued iss and sub claims, allowing an array-valued iss that contains the expected issuer to pass...

6.5CVSS5.5AI score0.00091EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/24 4:14 p.m.31 views

CVE-2026-66908

Apache Camel Platform HTTP Main component (versions 4.8.0 through 4.21.x ) silently skipped validation of the iss and aud JWT claims when neither jwtIssuer nor jwtAudience was configured. The root cause is that JWTAuthenticationConfigurer.buildJwtOptions returned null, causing the Vert.x JWTAuth ...

7.5CVSS5.3AI score0.00409EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/24 12:00 a.m.23 views

PT-2026-80920

Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT...

5.4AI score0.00409EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/08/15 12:31 a.m.13 views

EUVD-2026-58817

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

5.4CVSS5.5AI score0.00173EPSS
SaveExploits0References3
NVD
NVD
added 2026/08/14 11:16 p.m.16 views

CVE-2026-74240

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

5.4CVSS0.00173EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/14 10:43 p.m.41 views

CVE-2026-74240 Quay: jwt claim validation bypasses in quay federated robot and sso authentication

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

5.4CVSS0.00173EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/14 10:43 p.m.34 views

CVE-2026-74240

The CVE concerns Red Hat Quay’s JWT validation for federated robot accounts and SSO, where flawed audience verification and insufficient enforcement of azp and sub allow a token from the same identity provider to bypass security boundaries, potentially leading to unauthorized access where audienc...

5.4CVSS5.4AI score0.00173EPSS
SaveExploits0References2Affected Software2
RedhatCVE
RedhatCVE
added 2026/08/14 10:42 p.m.10 views

CVE-2026-74240

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

5.4CVSS5.6AI score0.00173EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/30 8:16 a.m.17 views

CVE-2026-18353

PIA's POST /v1/upload/sbom endpoint accepts a Bearer JWT and checks its unverified iss claim against an issuer allowlist using Python's urlparse before performing OIDC discovery with requests. Because urlparse and requests/urllib3 parse an authority string containing a backslash e.g...

8.8CVSS0.00239EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/14 3:02 p.m.58 views

CVE-2026-10714

The CVE-2026-10714 issue affects FactoryTalk Services Platform (FTSP) . It hinges on a JWT validation bypass where the application does not verify that the JWT algorithm is configured for RSA, allowing an attacker to set the algorithm to "none" and forge tokens. This could enable an authenticated...

8.8CVSS6.1AI score0.00113EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/06/18 1:52 p.m.11 views

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration in the JWT validation process. An attacker can maintain persistent unauthorized access by presenting tokens that omit the exp and iat claims, thereby bypassing session expiration and freshness checks. Thi...

4.2CVSS6.1AI score0.00318EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/16 5:16 p.m.26 views

CVE-2026-53776

Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers to bypass token expiration by exploiting the unconditional setting of validateexp = false in the verifydecode helper within the stdlib JWT verification path. Attackers in possession of a previously issued...

9.3CVSS0.00357EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/06/16 12:00 a.m.40 views

PT-2026-49727

Name of the Vulnerable Software and Affected Versions Perry versions prior to 0.5.1166 Description An issue in the JWT validation process allows remote attackers to bypass token expiration. This occurs because the verify decode helper within the stdlib JWT verification path unconditionally sets...

9.3CVSS5.3AI score0.00357EPSS
SaveExploits0References7
Rows per page
Query Builder