CVE-2026-89315

The JwtClaims.MarshalJSON function is vulnerable to a panic due to the use of reflect.StructOf at runtime. The application synthesizes field names by prepending "A" to untyped claim names; if these resulting names are not valid Go identifiers or result in duplicate fields, the program will crash....

CVE-2026-89315 JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix

JwtClaims.MarshalJSON built a Go struct at runtime with reflect.StructOf, synthesising a field named "A" + claimName for each untyped claim. reflect.StructOf panics when a field name is not a valid Go identifier, or when it duplicates another field. Both conditions are reachable from ordinary JWT...

CVE-2026-89313

The JwksTrustStore.Get function in the gose library is vulnerable to a logic error where it returns the last fetched JWKS key with a nil error when a requested kid is absent. This occurs because the function assigns parsed keys to a named return value during cache refreshes, and a trailing naked ...

CVE-2026-89313 JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nil

JwksTrustStore.Get assigned each parsed key to the function's named return value while refreshing the JWKS cache. When the requested kid was not present, the trailing naked return handed the caller the last key in the JWKS document together with a nil error — a confidently wrong answer instead of...

CVE-2026-89313 JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nil

JwksTrustStore.Get assigned each parsed key to the function's named return value while refreshing the JWKS cache. When the requested kid was not present, the trailing naked return handed the caller the last key in the JWKS document together with a nil error — a confidently wrong answer instead of...

ADFSDump

ADFSDump A C tool to dump all sorts of goodies from AD FS. Created by Doug Bienstock @doughsec while at Mandiant FireEye. This tool is designed to be run in conjunction with ADFSpoof. ADFSdump will output all of the information needed in order to generate security tokens using ADFSpoof. Detailed...

Security Bulletin: Security vulnerabilities have been found in Db2 shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM)

Summary DB2 is shipped as a component of IBM Guardium Key Lifecycle Manager SKLM/GKLM. Information about security vulnerabilities affecting DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Product...

WordPress Infility Global plugin < 2.16.25 - Unauthenticated Google Translate API Key Update vulnerability

Unauthenticated Google Translate API Key Update vulnerability discovered by Enrico Marcolini, Claudio Marchesini, Dottor Marc in WordPress Plugin Infility Global versions 2.16.25...

keyfinder

Overview Installation Keyfinder Usage Key Parsing Simple Example Verbose Output APK Parsing Simple APK Example crt.sh Checking Key File Usage Overview CERT Keyfinder is a utility for finding and analyzing key files on a filesystem as well as contained within Android APK files. CERT Keyfinder...

reternal-quickstart

RE:TERNAL Note: Still under development, only use for testing and do not expose interfaces! Current compose doesn't work yet, only try when you know what you're doing RE:TERNAL is a centralised purple team orchestration service to manage third-party C2 frameworks. Agents are installed on endpoint...

follow-redirects: follow-redirects: Information disclosure via cross-domain redirects

A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect a redirection to a different domain, custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect...

CLEANSTART-2026-RV97727 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

Security vulnerability affects the argo-cd package. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

CLEANSTART-2026-JZ64698 RSA and DSA public key parsers did not enforce size limits on key parameters

Security vulnerability affects the argo-cd package. The RSA and DSA public key parsers did not enforce size limits on key parameters...

CLEANSTART-2026-MF33495 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate

Security vulnerability affects the argo-cd package. SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate...

Curl 7.69.1 < 8.23.0 SSH Known Hosts Validation Error

The version of curl installed on the remote host is 7.69.1 prior to 8.23.0. It is, therefore, affected by a host key validation vulnerability: - When libcurl uses libssh2 with a hashed knownhosts file, an unrelated initial entry can cause host key validation to report a key mismatch as a missing...

PT-2026-121827

Name of the Vulnerable Software and Affected Versions plug versions 1.6.3 through 1.6.9 plug crypto versions 1.0.0 through 2.2.0 Description An unauthenticated remote attacker can expose the secret key base or other sensitive secrets through application logs by providing wrong-typed arguments. Th...

PT-2026-122087

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message first lease pointer so multiple IA options in one message reuse the same Reconfigure authentication key. A DHCPv6 REQUEST from an adjacent-network...

PT-2026-122198

Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission helper.py that allows authenticated users to retain stale group-based permissions across different spaces by exploiting a cache key keyed only on user id while omitting the active space, with the cach...

One-Sided-DIQKD Using Any Pure Bipartite Entangled State Secure against All Attacks

Quantum Key Distribution QKD allows spatially separated parties to establish a secret key among themselves based on quantum principles. While QKD systems are being deployed worldwide, their reliance on trusted measurements makes them vulnerable. Moreover, existing protocols have largely focussed ...

From Link Availability to Deadline-Constrained Key Service: A Feasibility Framework for Mobile Free-Space Quantum Key Distribution

Mobile free-space quantum key distribution QKD links can provide secret bits intermittently, whereas applications may need cryptographic key material at specified times. Optical feasibility, positive finite-key output, and deadline-compliant key service are consequently different claims. This...