DNSExfiltrator

DNSExfiltrator 作者：Arno0x0x - @Arno0x0x DNSExfiltrator 允许通过 DNS 请求的隐蔽通道传输（ 泄露 ）文件。这基本上是一个数据泄露测试工具，允许通过隐蔽通道泄露数据。 DNSExfiltrator 包含两部分： 1. 服务器端 ，以一个单独的 Python 脚本（dnsexfiltrator.py）形式提供，作为自定义 DNS 服务器接收文件 2. 客户端 （ 受害者端 ），提供三种形式： dnsExfiltrator.cs：一个 C 脚本，可用 csc.exe 编译成 Windows 托管可执行文件...

PT-2026-34782

OpenClaw before 2026.3.31 contains a replay detection bypass vulnerability in webhook signature handling that treats Base64 and Base64URL encoded signatures as distinct requests. Attackers can re-encode Telnyx webhook signatures to bypass replay detection while maintaining valid signature...

EUVD-2022-5902

Malicious code in bioql PyPI...

Insecure Signature Verification

jsrsasign is vulnerable to insecure signature verification. The vulnerability exists because the library does not properly validate the JWS or JWT signature with non-Base64URL encoding special characters or number escaped characters such as !@$% or \11...

GHSA-3FVG-4V2M-98JF JWS and JWT signature validation vulnerability with special characters

Impact Jsrsasign supports JWSJSON Web Signatures and JWTJSON Web Token validation. However JWS or JWT signature with non Base64URL encoding special characters or number escaped characters may be validated as valid by mistake. For example, even if a string of non Base64URL encoding characters such...