1881 matches found
kong
Kong: The Agentic Reverse Engineer LLM orchestration for reverse engineering binaries What is Kong? Most tasks follow a linear relationship: the more difficult a task, the longer it usually takes. Reverse engineering and binary analysis is a task in which the actual difficulty is somewhat trivial...
Kong Admin <=2.03 - Admin API Access
Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1. id: CVE-2020-11710 info: name: Kong Admin =2.03 - Admin API Access author: pikpikcu severity: critical description: Kong Admin through 2.0.3 contains an issue v...
cve-2014-6271-mengjia-kong
This repository does not have a README...
kong-pwn
kong-pwn Usa KongAPI expuesto para actuar como un proxy y obtener URLs de metadatos o URLs internas. CVE-2020-11710 - No es una vulnerabilidad, es una mala configuración. Cómo usar root@kitploit: usage: kong-pwn.py -h -u URL -s SSRF -p PROXY kong-pwn.py: error: the following arguments are require...
CVE-2026-14916
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...
CVE-2026-14917
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...
CVE-2026-14916 Kong API Gateway Enterprise: JWT Algorithm-Confusion
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...
CVE-2026-14916
Kong API Gateway Enterprise is affected by a JWT algorithm-confusion vulnerability in components that validate JWTs for MCP OAuth2 or DataKit integrations. The root cause is a failure to verify that the JWT signing algorithm is compatible with the type of key used for verification, allowing an un...
CVE-2026-14916 Kong API Gateway Enterprise: JWT Algorithm-Confusion
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...
EUVD-2026-80389
A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...
CVE-2026-14917 Kong API Gateway Enterprise: SAML Authentication bypass
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...
CVE-2026-14917 Kong API Gateway Enterprise: SAML Authentication bypass
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...
EUVD-2026-80387
A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...
CVE-2026-14917
CVE-2026-14917 is a SAML authentication bypass in the Kong API Gateway Enterprise SAML plugin. When the validate_assertion_signature option is explicitly set to false (it is enabled by default ), the plugin extracts the SAML identity from an unsigned assertion without verifying a valid cryptograp...
CVE-2026-86879
creationtimestamp| type| source ---|---|--- 2026-09-15 05:16:04+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 21:16:33+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:00:56+00:00|...
CVE-2025-20064
creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:36+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2047...
CVE-2026-77180
creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:16+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2047 2026-09-03 12:45:06+00:00| seen| https://www.acn.gov.it/portale/w/f5-risolte-vulnerabilita-nei-prodotti-nginx 2026-09-03 13:45:08+00:00| seen|...
CVE-2026-63020
creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:05+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2047 2026-09-03 13:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mumli32zq72z...
CVE-2026-20355
creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:03+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2046 2026-09-03 08:46:09+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 10:44:22+00:00| seen|...