jwt-key-confusion-poc

JWT Key Confusion PoC CVE-2015-9235 Scritto per le sfide Hack The Box - Under Construction e Secret Entrambi gli script inclusi eseguono un attacco di Key Confusion sui Java Web Token CVE-2015-9235. Per eseguire l'attacco è necessario che l'attaccante conosca la chiave pubblica che il server...

CVE-2015-9235_JWT_key_confusion

Descrizione Questa applicazione consente di sostituire un valore in un token JWT JSON Web Token utilizzando il metodo HMAC-SHA256 per ricalcolare la firma. Prende in input un token, una chiave da sostituire e il nuovo valore associato a tale chiave. Utilizzo Clona o scarica il codice sorgente...

poc-cve-2016-10555

Cambiare l'algoritmo RS256 asimmetrico in HS256 simmetrico - POC CVE-2016-10555 L'algoritmo HS256 utilizza la chiave segreta per firmare e verificare ogni messaggio. L'algoritmo RS256 utilizza la chiave privata per firmare il messaggio e la chiave pubblica per l'autenticazione. Se si cambia...

CVE-2018-0114-PoC

CVE-2018-0114 PoC इसे PentesterLab के लिए लिखा अगर आप PentesterLab से हैं तो धोखा न दें, सीखना कहीं बेहतर है। उम्मीद है किसी के काम आएगा, अगर नहीं तो भविष्य में मेरे लिए : उदाहरण root@kitploit: $ python3 script.py Making keys... 'alg': 'RS256', 'jwk': 'kty': 'RSA', 'kid': '[email protected]'...

jwtXploiter

jwtXploiter Uno strumento per testare la sicurezza dei JSON Web Tokens. Testa un JWT contro tutte le CVE note; Manipola il payload del token: modifica i valori dei claims e subclaims. Sfrutta i claim dell'header vulnerabili noti kid, jku, x5u Verifica un token Recupera la chiave pubblica della...

POC_CVE-2015-9235

CVE-2015-9235 Demonstração do ataque de confusão de algoritmo em bibliotecas Json Web Token JWT. JWTs são frequentemente usados em cookies para certificar uma sessão de usuário e, portanto, este ataque é crítico. O módulo node [email protected] foi usado para demonstrar a vulnerabilidade. Es...

CVE-2026-58432

CVE-2026-58432 relates to Gitea (code.gitea.io/gitea) and describes missing authorization and an authorization bypass via a user-controlled key, plus incorrect permissions on a critical resource that could expose sensitive information to an unauthorized actor. The CVE is rated with CVSS v3.1 base...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Next.js (CVE-2025-57752 and CVE-2025-55173)

Summary The vulnerabilities CVE-2025-57752 Cache Key Confusion / Cache Deception and CVE-2025-55173 Content Injection / Arbitrary File Delivery in the Next.js framework have been completely resolved by upgrading the dependency from version 14.2.26 to 15.5.15. Vulnerability Details...

Astra Linux – Vulnerability in ujson

UltraJSON is a fast JSON encoder and decoder written in pure C, with bindings for Python 3.7+. It was found that affected versions incorrectly decoded certain characters. JSON strings containing escaped surrogate characters that were not part of a valid surrogate pair were decoded incorrectly. Th...

CVE-2026-33496

ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulnerable to authentication bypass due to cache key confusion. The oauth2introspection authenticator cache does not distingui...

CVE-2026-33496

ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulnerable to authentication bypass due to cache key confusion. The oauth2introspection authenticator cache does not distingui...

CVE-2026-33496 Ory Oathkeeper has an authentication bypass by cache key confusion

ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulnerable to authentication bypass due to cache key confusion. The oauth2introspection authenticator cache does not distingui...

CVE-2026-33496 Ory Oathkeeper has an authentication bypass by cache key confusion

ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulnerable to authentication bypass due to cache key confusion. The oauth2introspection authenticator cache does not distingui...

CVE-2026-33496

Overview: CVE-2026-33496 affects ORY Oathkeeper (Identity & Access Proxy) prior to version 26.2.0, where the oauth2_introspection authenticator cache fails to distinguish tokens across different introspection URLs, enabling authentication bypass via cache key confusion. Impact (as described): An ...

Ory Oathkeeper 安全漏洞

Ory Oathkeeper is an access control decision-making software developed by Ory OpenSource. Versions of Ory Oathkeeper prior to 26.2.0 contained security vulnerabilities. These vulnerabilities were caused by a cache key confusion in the oauth2introspection authentication mechanism, which could lead...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication due to cache key confusion. An attacker can gain unauthorized access by using a token to prime the cache, and subsequently use the same token for rules that use a different introspection server. Note: This is onl...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication due to cache key confusion. An attacker can gain unauthorized access by using a token to prime the cache, and subsequently use the same token for rules that use a different introspection server. Note: This is onl...

GO-2026-4799 Ory Oathkeeper has an authentication bypass by cache key confusion in github.com/ory/oathkeeper

Ory Oathkeeper has an authentication bypass by cache key confusion in github.com/ory/oathkeeper...

Ory Oathkeeper has an authentication bypass by cache key confusion

Description Ory Oathkeeper is vulnerable to authentication bypass due to cache key confusion. The oauth2introspection authenticator cache does not distinguish tokens that were validated with different introspection URLs. An attacker can therefore legitimately use a token to prime the cache, and...

GHSA-4MQ7-PVJG-XP2R Ory Oathkeeper has an authentication bypass by cache key confusion

Description Ory Oathkeeper is vulnerable to authentication bypass due to cache key confusion. The oauth2introspection authenticator cache does not distinguish tokens that were validated with different introspection URLs. An attacker can therefore legitimately use a token to prime the cache, and...