CVE-2023-50387

CVE-2023-50387 KeyTrap in DNS CVE-2023-50387 This repository is for educational purposes. The number of keys and signatures has been intentionally kept low to prevent their use in actual attacks, and a script for generating colliding keys are not included. Test Setting up the PoC environment $...

MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on...

CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🚀 CVE-2024-41107...

CVE-2022-39299_PoC_Generator

Exploiting CVE-2022-39299 Signature bypass via multiple root elements Advisory : https://github.com/node-saml/passport-saml/security/advisories/GHSA-m974-647v-whv7 Patch : https://github.com/node-saml/passport-saml/commit/8b7e3f5a91c8e5ac7e890a0c90bc7491ce33155e Base Payload Example Extracted Fro...

CVE-2026-29000-pac4j-jwt

pac4j-jwe-forge CVE-2026-29000 Proof-of-concept for CVE-2026-29000. Targets pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3. The vulnerability is straightforward: the library accepts a PlainJWT unsigned, alg=none as long as it's wrapped inside a valid JWE. Since the server exposes its RSA...

CVE-2026-102946

joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.7.4, joserfc.jws.deserializejson accepts a JWS General JSON Serialization with an empty signatures array as authenticated. The verifygeneraljson loop performs no...

CVE-2026-29000

CVE-2026-29000: pac4j-jwt Authentication Bypass POC This repository contains a proof-of-concept POC for an authentication bypass vulnerability in pac4j-jwt CVE-2026-29000. The vulnerability allows an attacker to bypass signature verification by nesting a PlainJWT using alg: none inside a JWE JSON...

CVE-2026-29000

CVE-2026-29000: pac4j-jwt JwtAuthenticator authentication bypass Full buildout: writeup, Java in-process PoC, Python token-forge CLI and library, tests. Summary CVE: CVE-2026-29000 CVSS 10, CWE-347 Affected: pac4j-jwt 4.5.9 / 5.7.9 / 6.3.3 when using JWE + signature config Issue: JWE-wrapped...

cve-2026-29000

CVE-2026-29000 Exploit JWT Authentication Bypass in pac4j-jwt via JWE-wrapped PlainJWT Vulnerability Description CVE-2026-29000 is a critical authentication bypass vulnerability affecting pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3. The vulnerability allows remote attackers to forge...

spd_dump-macos

spddump for macOS English | 简体中文 macOS port of the UNISOC Spreadtrum BootROM/FDL flashing toolchain. Based on ilyakurdyukov/spreadtrumflash MIT, with execaddr2 — the CVE-2022-38694 signature-verification bypass of the closed-source spddump — reimplemented, completing the full chain on macOS arm64...

CVE-2025-29775

SAMLStorm CVE-2025-29775 Lab Environment This is a lab environment for demonstrating the SAMLStorm vulnerability CVE-2025-29775 that affects the xml-crypto library and SAML implementations in Node.js. Note: This is not a true exploitation of the vulnerability, just a recreation to demonstrate how...

CVE-2021-21239

Technical Report on CVE-2021-21239: Redash SAML Authentication Vulnerability Introduction to SAML Security Assertion Markup Language SAML is an open standard for exchanging authentication and authorization data between parties in a federated identity system. It enables single sign-on SSO across...

CVE-2017-13156-Janus

CVE-2017-13156-Janus Reproduction Attackers can use the Janus vulnerability CVE-2017-13156 to bypass Android's signature scheme V1 mechanism, arbitrarily modifying application code without affecting its signature. Android's signature mechanism is used to protect applications from tampering...

spd_flasher

CVE-2022-38694 Hardened Exploit — RP2350 USB Host Auto Flasher 中文版 README Tutorial UDX710 Boot Chain Reverse Engineering and RP2350 Hardened Boot Tutorial Exploiting CVE-2022-38694 Unisoc BootROM vulnerability via Raspberry Pi RP2350 USB Host to automatically send SPL Loader on boot and start...

CVE-2026-9090-poc

CVE-2026-9090 — Casdoor SAML Signature Bypass PoC Proof-of-concept for CVE-2026-9090 CWE-347, Improper Verification of Cryptographic Signature, an authentication bypass in the Casdoor identity platform. Attribution. CVE-2026-9090 was published and coordinated by CERT/CC — see VU780781. This...

CVE-2024-52510

Nextcloud X-E2EE-SIGNATURE Bypass POC Summary During normal operation of Nextcloud's E2EEv2 protocol, clients cryptographically sign folder-metadata before uploading to the server. This ensures the metadata has not been tampered with when it is re-fetched for the purposes of file-sharing or synci...

cve-2026-25262-sm8450-research

Research Tools In the course of this work, the public tool edl B. Kerler, V3.62 was used, along with modifications based on it. Experimental testbed: To test the hypothesis of CVE-2026-25262 applicability to the SM8450 platform, an experimental tool cvefinalsingle was created on top of edl. It...

Weblogic_Wsat_RCE

WeblogicWsatRCE POC for CVE-2017-10271. Since java.lang.ProcessBuilder was the original vector for RCE, there are multiple signature based rules that block this particular payload. Added java.lang.Runtime and will add others in the future. This is for educational purposes only: I take no...

EUVD-2026-101729

n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node reference form. Attackers holding an execution's resume token can approve waiting executions meant for others, runnin...

CVE-2026-110846

The automation tool n8n versions before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint. The root cause is a logic error where the system performs Send-and-Wait validation before normalizing an alternate node reference form (CWE-180). An attacker posses...