18 matches found
sign-saboteur
SignSaboteur SignSaboteur 是一个 Burp Suite 扩展，用于编辑、签名、验证和攻击签名令牌。 它支持多种令牌类型：Django TimestampSigner、ItsDangerous Signer、Express cookie-session 中间件、OAuth2 Proxy、Tornado 签名 Cookie、Ruby Rails 签名 Cookie、Ruby Rails 加密 Cookie、Nimbus JOSE + JWT 以及未知签名字符串。 您可以在 Portswigger 研究博客文章页面上找到有关该扩展的更多信息 - Introducing...
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a signature verification bypass vulnerability in joserfc (CVE-2026-49852)
Summary An authentication and signature verification bypass vulnerability in the joserfc JSON Object Signing and Encryption JOSE library CVE-2026-49852 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 1.6.8. Vulnerability Details...
PT-2026-103622
Name of the Vulnerable Software and Affected Versions PyJWT versions 2.11.0 through 2.13.0 Description The PyJWT. merge options function can modify a mutable options mapping provided by the caller when verify signature is set to false. If an application reuses this modified mapping in subsequent...
EUVD-2026-45938
Network-AI before 5.13.4 contains an improper cryptographic signature verification vulnerability in APSAdapter where the default local verifier accepts any non-empty string as valid. Unauthenticated attackers can submit forged APS delegation payloads with arbitrary scopes to bypass signature...
CVE-2026-16093
Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication. A flaw was discovered where this enforcement can be bypassed. An attacker with valid client credentials can provide a fake, unsigned...
EUVD-2026-45222
Keycloak provides a mechanism called Client Policies to enforce security requirements on clients, such as requiring them to use signed JWTs for authentication. A flaw was discovered where this enforcement can be bypassed. An attacker with valid client credentials can provide a fake, unsigned...
CVE-2026-49852: Improper Authentication
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.6.8, joserfc.jwt.decode accepts attacker-forged HMAC-signed tokens when the caller-supplied verification key is the empty string or None, because HMACAlgorithm.sign...
EUVD-2026-41427
Dapr Sentry's OIDC discovery endpoint derives the issuer and jwksuri of the /.well-known/openid-configuration document from the request Host, honoring an attacker-controlled X-Forwarded-Host header without validation when no allowed-hosts list is configured the default, and serves the document wi...
CVE-2023-22482
A flaw was found in ArgoCD. GitOps is vulnerable to an improper authorization bug where the API may accept invalid tokens. ID providers include an audience claim in signed tokens, which may be used to restrict which services can accept the token. ArgoCD doesn't properly validate the audience clai...
GHSA-64RH-R86Q-75FF Hard coded cryptographic key in Kiali
A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possibly gaining privileges to view and alte...
JSON Web Token None Hashing Algorithm
JSON Web Tokens can be signed to protect against data tampering. By using an asymmetric or a symmetric signing algorithm, the application computes a signature of the token data which will be verified during token decoding to ensure its integrity. JSON Web Tokens can be configured by an applicatio...
The vulnerability of the management console for the service mesh based on Kiali in Istio, related to the use of a hard-coded encryption key, allows attackers to escalate their privileges.
The vulnerability of the management console for the Istio Kiali service mesh is related to the use of a strictly encrypted encryption key. Exploiting this vulnerability allows an attacker to enhance their privileges by creating self-signed access tokens...
CVE-2020-1764
A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possibly gaining privileges to view and alte...
CVE-2020-1764
CVE-2020-1764 concerns a hard-coded cryptographic key in Kiali’s default config, affecting all versions
CVE-2020-1764: Use of Hard-coded Cryptographic Key
A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possibly gaining privileges to view and alte...
PT-2020-2707 · Istio · Kiali
Name of the Vulnerable Software and Affected Versions: Kiali versions prior to 1.15.1 Description: The issue is related to a hard-coded cryptographic key in the default configuration file of Kiali, which is part of the Istio service mesh. This flaw can be exploited by a remote attacker to create...
CVE-2018-15382
CVE-2018-15382 (Cisco HyperFlex): A static signing key present in all Cisco HyperFlex systems enables an unauthenticated attacker to generate valid, signed session tokens and access the HyperFlex Web UI on other systems. Connected sources indicate affected software prior to 3.5(1a) and describe t...