jwt-key-confusion-poc

إثبات مفهوم الارتباك في مفتاح JWT CVE-2015-9235 مكتوب لتحديات Hack the Box - Under Construction و Secret كلا البرنامجين المضمنين ينفذان هجوم ارتباك مفتاح توكن ويب جافا CVE-2015-9235. لتنفيذ الهجوم، يجب أن يعرف المهاجم المفتاح العام الذي سيستخدمه الخادم للتحقق من التوقيع، بالإضافة إلى أن الخادم مه...

poc-cve-2016-10555

एल्गोरिदम RS256asymmetric को HS256symmetric में बदलें - POC CVE-2016-10555 एल्गोरिदम HS256 प्रत्येक संदेश पर हस्ताक्षर और सत्यापन करने के लिए गुप्त कुंजी का उपयोग करता है। एल्गोरिदम RS256 संदेश पर हस्ताक्षर करने के लिए निजी कुंजी का उपयोग करता है और प्रमाणीकरण के लिए सार्वजनिक कुंजी का उपयोग करता...

jwtXploiter

jwtXploiter JSON वेब टोकन्स की सुरक्षा जाँचने का एक उपकरण। एक JWT को सभी ज्ञात CVEs के विरुद्ध जाँचें; टोकन पेलोड के साथ छेड़छाड़: क्लेम्स और सबक्लेम्स मान बदलें। ज्ञात कमज़ोर हेडर क्लेम्स kid, jku, x5u का शोषण करें एक टोकन सत्यापित करें अपने लक्ष्य के ssl कनेक्शन की सार्वजनिक कुंजी प्राप्त करें ...

POC_CVE-2015-9235

CVE-2015-9235 توضيح لهجوم الخلط بين الخوارزميات algorithm confusion على مكتبات Json Web Token JWT. غالبًا ما تُستخدم JWT في ملفات تعريف الارتباط cookies للتحقق من جلسة المستخدم، ولذلك فإن هذا الهجوم خطير. تم استخدام وحدة Node.js [email protected] لتوضيح الثغرة. كان هذا المشروع أيضًا نشاط برم...

CVE-2018-0114-PoC

CVE-2018-0114 PoC PentesterLab 用に書きました PentesterLab から来た人はズルをしないでください。自分で学ぶ方がずっと良いです。 誰かの役に立てば幸いです。将来の自分じゃなければですが : 例 root@kitploit: $ python3 script.py Making keys... 'alg': 'RS256', 'jwk': 'kty': 'RSA', 'kid': '[email protected]', 'use': 'sig', 'n':...

CVE-2020-7494

creationtimestamp| type| source ---|---|--- 2026-09-01 17:01:12+00:00| seen| https://t.me/cissp/1528 2026-09-02 01:05:01+00:00| seen| https://t.me/cissp/1528...

CVE-2015-9235_JWT_key_confusion

وصف يتيح لك هذا التطبيق استبدال قيمة في رمز JSON Web Token JWT باستخدام طريقة HMAC-SHA256 لإعادة حساب التوقيع. يأخذ كمدخل رمزًا مميزًا، ومفتاحًا لاستبداله، والقيمة الجديدة المرتبطة بهذا المفتاح. الاستخدام قم بنسخ أو تنزيل كود المصدر للتطبيق. root@kitploit: git clone...

Astra Linux – Vulnerability in ujson

UltraJSON is a fast JSON encoder and decoder written in pure C, with bindings for Python 3.7+. It was found that affected versions incorrectly decoded certain characters. JSON strings containing escaped surrogate characters that were not part of a valid surrogate pair were decoded incorrectly. Th...

CVE-2026-58432

CVE-2026-58432 relates to Gitea (code.gitea.io/gitea) and describes missing authorization and an authorization bypass via a user-controlled key, plus incorrect permissions on a critical resource that could expose sensitive information to an unauthorized actor. The CVE is rated with CVSS v3.1 base...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Next.js (CVE-2025-57752 and CVE-2025-55173)

Summary The vulnerabilities CVE-2025-57752 Cache Key Confusion / Cache Deception and CVE-2025-55173 Content Injection / Arbitrary File Delivery in the Next.js framework have been completely resolved by upgrading the dependency from version 14.2.26 to 15.5.15. Vulnerability Details...

CVE-2026-33496

ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulnerable to authentication bypass due to cache key confusion. The oauth2introspection authenticator cache does not distingui...

CVE-2026-33496

ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulnerable to authentication bypass due to cache key confusion. The oauth2introspection authenticator cache does not distingui...

CVE-2026-33496

Overview: CVE-2026-33496 affects ORY Oathkeeper (Identity & Access Proxy) prior to version 26.2.0, where the oauth2_introspection authenticator cache fails to distinguish tokens across different introspection URLs, enabling authentication bypass via cache key confusion. Impact (as described): An ...

CVE-2026-33496 Ory Oathkeeper has an authentication bypass by cache key confusion

ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulnerable to authentication bypass due to cache key confusion. The oauth2introspection authenticator cache does not distingui...

CVE-2026-33496 Ory Oathkeeper has an authentication bypass by cache key confusion

ORY Oathkeeper is an Identity & Access Proxy IAP and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules. Versions prior to 26.2.0 are vulnerable to authentication bypass due to cache key confusion. The oauth2introspection authenticator cache does not distingui...

Ory Oathkeeper 安全漏洞

Ory Oathkeeper is an access control decision-making software developed by Ory OpenSource. Versions of Ory Oathkeeper prior to 26.2.0 contained security vulnerabilities. These vulnerabilities were caused by a cache key confusion in the oauth2introspection authentication mechanism, which could lead...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication due to cache key confusion. An attacker can gain unauthorized access by using a token to prime the cache, and subsequently use the same token for rules that use a different introspection server. Note: This is onl...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication due to cache key confusion. An attacker can gain unauthorized access by using a token to prime the cache, and subsequently use the same token for rules that use a different introspection server. Note: This is onl...

GO-2026-4799 Ory Oathkeeper has an authentication bypass by cache key confusion in github.com/ory/oathkeeper

Ory Oathkeeper has an authentication bypass by cache key confusion in github.com/ory/oathkeeper...

Ory Oathkeeper has an authentication bypass by cache key confusion

Description Ory Oathkeeper is vulnerable to authentication bypass due to cache key confusion. The oauth2introspection authenticator cache does not distinguish tokens that were validated with different introspection URLs. An attacker can therefore legitimately use a token to prime the cache, and...