jwt_tool

The JSON Web Token Toolkit v2 jwttool.py は、JWT JSON Web Tokens の検証、偽造、スキャン、改ざんを行うためのツールキットです。 主な機能は次のとおりです: トークンの有効性の確認 既知のエクスプロイトのテスト: CVE-2015-2951 alg=none 署名バイパスの脆弱性 CVE-2016-10555 RS/HS256 公開鍵不一致の脆弱性 CVE-2018-0114 Key injection 脆弱性 CVE-2019-20933/CVE-2020-28637 Blank password 脆弱性...

OpenMetadata - Authentication Bypass

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository, in-depth lineage, and seamless team collaboration. The JwtFilter handles the API authentication by requiring and verifying JWT tokens. When a new request comes in, the request...

CVE-2026-29000-Lab

CVE-2026-29000 — pac4j-jwt ライブラリレベル PoC ラボ TL;DR このリポジトリには、pac4j-jwt における CVE-2026-29000 のライブラリレベル PoC が含まれています。 脆弱なバージョンと修正済みバージョンの動作を、以下の2つのケースで比較します: ベースライン : 正規のトークンが受け入れられるべき 攻撃 : 偽造トークンが脆弱なバージョンでは受け入れられ、修正済みバージョンでは拒否されるべき Version| Baseline| Attack| Result ---|---|---|--- 6.0.3| ✅| ✅| 脆弱...

CVE-2026-30863-Exploit

CVE-2026-30863 – Parse Server JWT Audience 検証 影響を受けるバージョン Parse Server 8.6.10 および 9.5.0-alpha.11 脆弱なコンポーネント Google 認証アダプター（GoogleAuthAdapter） Apple 認証アダプター（AppleAuthAdapter） Facebook 認証アダプター（FacebookAuthAdapter） 根本原因 アダプターが audience パラメータ（Google/Apple の場合は clientId、Facebook の場合は appIds）を設定せずに...

CVE-2026-71206-PoC

CVE-2026-71206 — Shiori: JWT CheckToken はアカウント状態を再検証しない 製品: go-shiori/shiori ファイル: internal/domains/auth.go CWE: CWE-613 — 不十分なセッション有効期限 CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L — 8.2 高 CNA: Turan Security · CVE レコード 説明 Shiori の CheckToken 関数（internal/domains/auth.go）は、JWT の HMAC...

CVE-2026-66908

CVE-2026-66908 — camel-platform-http-main JWT iss/aud が検証されない Apache Camel の脆弱性に対する実行可能な Proof-of-Concept 再現コードです。この脆弱性では、camel-main 組み込み HTTP サーバー が、jwtIssuer も jwtAudience も設定されていない場合に、キーストアのみから JWT 認証子を構築するため、受信トークンは署名と有効期限のみ がチェックされ、iss および aud クレームは一切検証されません。 ランタイム| ディレクトリ| スタック ---|---|---...

CVE-2026-100608 Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard

Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode MODE=queue, ENABLEBULLMQDASHBOARD=true, and !isCloud, the /admin/queues mount is protected only by the...

CVE-2026-100608 Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard

Flowise through 3.1.4 does not enforce authorization on the BullMQ admin dashboard. When the server runs in queue mode with the dashboard enabled and not in cloud mode MODE=queue, ENABLEBULLMQDASHBOARD=true, and !isCloud, the /admin/queues mount is protected only by the...

CVE-2026-93556

The ‘/password/guardarClau/recover’ endpoint accepts the ‘usuariId’ parameter, which specifies the account whose password is to be changed. The JWT token for the recovery process is not validated against the user specified in that parameter. An unauthenticated attacker could manipulate the...

EUVD-2026-84341

The ‘/password/guardarClau/recover’ endpoint accepts the ‘usuariId’ parameter, which specifies the account whose password is to be changed. The JWT token for the recovery process is not validated against the user specified in that parameter. An unauthenticated attacker could manipulate the...

PT-2026-95825

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in the OpenID Connect OIDC protocol implementation. During the token refresh process, the server restores requested audiences from stored client IDs but fails to verify if the...

About Authentication Bypass - Microsoft SharePoint (CVE-2026-55040) vulnerability

About Authentication Bypass - Microsoft SharePoint CVE-2026-55040 vulnerability. SharePoint is a web application for corporate intranet portals, document management, and collaboration. This vulnerability was disclosed as part of the July Microsoft Patch Tuesday. A remote unauthenticated attacker...

SUSE CVE-2026-53471

A flaw was found in migration-planner. The agent-API middleware processes JSON Web Tokens JWTs for authentication, but its UpdateSourceInventory and UpdateAgentStatus handlers fail to validate the sourceid claim within these tokens against the requested source ID. This oversight allows an...

CVE-2026-66908

A flaw was found in the Apache Camel Platform HTTP Main component. When JSON Web Token JWT authentication is configured with a keystore but without specifying an issuer or audience, the system fails to validate the 'iss' and 'aud' claims. This improper authentication allows an attacker to use any...

PT-2026-81231

The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token. Exploitation requires the attacker to already be in control of the SYSSY project's API key...

DEBIAN-CVE-2026-75509

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to version 1.7.3, JWTClaimsRegistry applies membership matching to list-valued iss and sub claims, allowing an array-valued iss that contains the expected issuer to pass...

CVE-2026-66908

The Apache Camel Platform HTTP Main component (versions 4.8.0 to before 4.22.0) contains an improper authentication vulnerability. When JWT authentication is enabled with a keystore but without jwtIssuer or jwtAudience configurations, the camel-main embedded HTTP server fails to validate the iss ...

Exploit for CVE-2026-66908

CVE-2026-66908 — camel-platform-http-main JWT iss/aud not...

PT-2026-80920

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.8.0 through 4.21.x Apache Camel versions 4.14.x through 4.14.8 Apache Camel versions 4.18.x through 4.18.3 Description An improper authentication issue exists in the Apache Camel Platform HTTP Main component. When the...

EUVD-2026-58817

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...