Lucene search
+L

4 matches found

Kitploit
Kitploit
added 2026/09/15 8:00 a.m.8 views

HATCHA

HATCHA CAPTCHAは人間であることを証明します。HATCHAは人間でないことを証明します。 HATCHA(H yperfast A gent T est for C omputational H euristic A ssessment)は、AIエージェントには簡単だが人間には困難なチャレンジ(大きな数の掛け算、文字列の反転、バイナリデコードなど)の背後にアクセスをゲートするリバースCAPTCHAです。 サーバーサイド検証 — 回答がクライアントに到達することはありません。HMAC署名されたトークン、ステートレス、データベース不要。 5つの組み込みチャレンジタイプ —...

6AI score
SaveExploits0References4
NVD
NVD
added 2026/08/25 8:18 a.m.10 views

CVE-2026-65633

Improper Authentication vulnerability in team-alembic AshAuthentication allows purpose-limited JWTs to be replayed as full bearer API credentials when a resource uses stateless bearer-token verification. The bearer-token authentication helper AshAuthentication.Plug.Helpers.retrievefrombearer/3...

7.6CVSS0.00359EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/25 8:03 a.m.37 views

CVE-2026-65633 Purpose-limited JWT accepted as full bearer authentication in AshAuthentication

Improper Authentication vulnerability in team-alembic AshAuthentication allows purpose-limited JWTs to be replayed as full bearer API credentials when a resource uses stateless bearer-token verification. The bearer-token authentication helper AshAuthentication.Plug.Helpers.retrievefrombearer/3...

7.6CVSS0.00359EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/25 8:03 a.m.6 views

CVE-2026-65633 Purpose-limited JWT accepted as full bearer authentication in AshAuthentication

Improper Authentication vulnerability in team-alembic AshAuthentication allows purpose-limited JWTs to be replayed as full bearer API credentials when a resource uses stateless bearer-token verification. The bearer-token authentication helper AshAuthentication.Plug.Helpers.retrievefrombearer/3...

7.6CVSS5.7AI score0.00359EPSS
SaveExploits0References10
Rows per page
Query Builder