3698 matches found
CVE-2026-59243
CVE-2026-59243 — Apache Airflow FAB Auth Manager JWT signature bypass Korean: README.ko.md Apache advisory: https://lists.apache.org/thread/x4784l7z00tl3gw4tv2dmvoon77rxgpl published 2026-07-29 CVE record: https://vulners.com/cve/CVE-2026-59243 Fixed in: apache-airflow-providers-fab==3.7.3 Class:...
CVE-2025-55449-AstrBot-RCE
Introduction AstrBot =3.5.17 hardcodes a JWT secret in the source code, allowing arbitrary plugin uploads and leading to RCE. Usage root@kitploit: python main.py 'http://127.0.0.1:6185' Source Code https://github.com/AstrBotDevs/AstrBot.git...
CVE-2019-19609-POC-Python
The script will try to reset the password to the one declared in the "updatedpass" variable, if it succeeds - it will give a JWT token from Strapi and use it to execute commands. Executing bind commands won't work unless sending a reverse shell payload, with bash or python or whatever. You can...
CVE-2025-8570
CVE-2025-8570 BeyondCart Connector = 2.1.0 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation 🚨 BeyondCart Connector = 2.1.0 - JWT Privilege Escalation CVE-2025-8570 🛡️ Vulnerability Overview The BeyondCart Connector plugin for WordPress, in versions 1.4.2 through 2.1.0 ...
CVE-2018-0114-Go
CVE-2018-0114 Proof of Concept Reference: CVE-2018-0114 Note: For educational purposes only. To generate a JWT with the claim "admin", run the following command in the project directory: root@kitploit: go run . --claim=admin root@kitploit: /\ \ /\ /\ \ /\ \ /'\ /'\ /' \ /' \ /'\ /' \ /' \ /\ \ ...
CVE-2026-86195
grav-plugin-api versions before 1.0.20 contain a privilege escalation vulnerability in the InvitationsController where the stripSuperFlags method only removes nested super flags but fails to strip dot-keyed equivalents like api.super. A non-super user manager with api.access and api.users.write...
the-same-key-opens-every-box-cve-2026-71960-hard-coded-jwt-secret-in-cudy-wr3000-mesh-mqtt
CVE-2026-71960 — Hard-coded JWT Secret in Cudy WR3000 2.0 Mesh MQTT Broker PoC tooling for the Hunt-Benito article "The Same Key Opens Every Box: CVE-2026-71960 — Hard-coded JWT Secret in Cudy's WR3000 Mesh MQTT Broker"...
CVE-2026-86195
grav-plugin-api versions 1.0.0 through 1.0.19 contain a privilege escalation vulnerability in the InvitationsController . The stripSuperFlags() method removes nested super flags but fails to strip dot-keyed equivalents such as api.super . A non-super user with api.access and api.users.write permi...
CVE-2026-86195 grav-plugin-api 1.0.0 through 1.0.19 Privilege Escalation via Dot-Keyed Super Flag
grav-plugin-api versions before 1.0.20 contain a privilege escalation vulnerability in the InvitationsController where the stripSuperFlags method only removes nested super flags but fails to strip dot-keyed equivalents like api.super. A non-super user manager with api.access and api.users.write...
CVE-2025-56643
CVE-2025-56643 Referencia pública para CVE-2025-56643 – Vulnerabilidad de sesión JWT en Wiki.js 2.5.307 Descripción: Requarks Wiki.js 2.5.307 no revoca ni invalida adecuadamente los tokens JWT activos cuando un usuario cierra sesión. Como resultado, los tokens emitidos previamente siguen siendo...
CVE-2026-13447
The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verifyidtoken function, which decodes and validates Firebase ID token...
AzTokenFinder
AzTokenFinder Is a small tool to extract JWT or JWT like looking data from different processes, like PowerShell, Excel, Word or others. The idea was inspired from the blog post https://mrd0x.com/stealing-tokens-from-office-applications/ from the amazing @mrd0x. In the new release, I added the...
CVE-2026-13447
The MStore API WordPress plugin (versions ≤ 4.20.0) is vulnerable to an unauthenticated authentication bypass via JWT forgery. The root cause lies in FirebasePhoneAuthHelper::verify_id_token(), which validates Firebase ID token claims (alg, kid, aud, iss) but never verifies the JWT cryptographic ...
EUVD-2026-71838
The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verifyidtoken function, which decodes and validates Firebase ID token...
CVE-2026-13447 MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery
The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verifyidtoken function, which decodes and validates Firebase ID token...
PT-2026-86308
Name of the Vulnerable Software and Affected Versions Mstore Api plugin for WordPress versions prior to 4.20.1 Description An authentication bypass exists due to JWT JSON Web Token forgery. The issue occurs in the FirebasePhoneAuthHelper::verify id token function, which validates token claims suc...
CVE-2026-82329
CVE-2026-82329 — JFrog Artifactory Unauthenticated Authentication Bypass Mass Exploit -red.svg Critical Authentication Bypass CVSS 9.8 — Actively Exploited in the Wild This tool is a mass exploit for CVE-2026-82329, a vulnerability that allows an unauthenticated attacker with network access to...
WordPress MStore API plugin <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery vulnerability
Unauthenticated Authentication Bypass via 'idtoken' Parameter JWT Forgery vulnerability discovered by t4g0 in WordPress Plugin MStore API versions = 4.20.0...
CVE-2026-82329-poc
CVE-2026-82329 Artifactory Security Assessment Tool PoC dan alat validasi untuk mengidentifikasi instalasi JFrog Artifactory self-hosted yang terdampak CVE-2026-82329. Alat ini memvalidasi rantai autentikasi berikut: 1. Membuat join JWT HS256 menggunakan signing key default yang kosong. 2. Mengir...