distributed-system-testing

Distributed Systems Testing Skills Two skills for AI coding agents that design and run claim-driven tests for distributed and stateful systems. Together they produce a structured Markdown test plan and a findings report with 10-state verdicts and an explicit SUT / harness / checker / environment...

cmcp

cMCP: Runtime MCP Confidencial Aplica la política de herramientas MCP dentro de un TEE, donde el agente que gobierna no puede alcanzarlo Inicio rápido · Arquitectura · Configuración · CLI · Registro de cambios Vista previa para desarrolladores - lanzado en la Cumbre de Computación Confidencial, 2...

dovecot: Dovecot: Authentication bypass via incorrect OAuth2 token validation

A flaw was found in Dovecot. This vulnerability allows an attacker to bypass authentication by exploiting how OAuth2 tokens are validated. If an OAuth2 token response does not include a scope claim, Dovecot incorrectly uses the audience claim in its place for authorization checks. This can lead t...

CVE-2026-98219

In the Linux kernel, the following vulnerability has been resolved: schedext: Close the pre-enable ops error claim window scxallocandaddsched publishes ops-priv before scxrootenableworkfn switches the state to SCXENABLING. An error claimed via scxbpferrorbstr from an associated BPF program in tha...

CVE-2026-50338

CVE-2026-50338 Omisión de autenticación entre emisores en el servidor de recursos de Spring Cloud Azure B2C Descripción AadB2cResourceServerAutoConfiguration en spring-cloud-azure-autoconfigure construye un JwtDecoder que confía en seis emisores de línea AAD login.microsoftonline.com,...

CVE-2026-66908

CVE-2026-66908 — camel-platform-http-main: no se validan iss/aud de JWT Reproductor de prueba de concepto ejecutable para la vulnerabilidad de Apache Camel en la que el servidor HTTP embebido de camel-main crea su autenticador JWT únicamente a partir de un almacén de claves cuando no se configura...

hdwebmobile-booking-appointments

HDWebmobile Reservas y Citas Vende servicios y citas reservables a través de WooCommerce, con una capacidad por franja horaria que nunca puede sobrevenderse. WordPress.org: https://wordpress.org/plugins/hdwebmobile-booking-appointments/ Requiere: WordPress 6.9+, WooCommerce, PHP 7.4+ Licencia:...

CVE-2023-3128

CVE-2023-3128 To check if a domain is vulnerable to CVE-2023-3128, which involves an authentication bypass in Grafana due to Azure AD email claim validation, you can use the following Python script: !/usr/bin/env python3 import requests import argparse def checkcve20233128targeturl, verbose=False...

CVE-2018-0114-Go

CVE-2018-0114 概念证明 参考：CVE-2018-0114 注意： 仅用于教育目的。 要生成包含 "admin" 声明的JWT，请在项目目录中运行以下命令： go run . --claim=admin /\ \ /\ /\ \ /\ \ /'\ /'\ /' \ /' \ /'\ /' \ /' \ /\ \ \ \ \ /\ \ \ \ \ \ \ \ \L\ /\ /\ \ /\ /\ \ /, \ /\ \L\ \ /\ /\ \ /, \ /, \ \ \ \ \ \ \ // \ \ \ \ \ \ \ \L //// / \ \ \ ...

CVE-2022-39227

CVE-2022-39227 CVE-2022-39227 : 概念验证 此 CVE-2022-39227 的概念验证代码。根据该CVE，JSON Web Token验证存在缺陷。可以通过有效的令牌，利用其签名与修改后的声明一起使用。 所需条件： 1. 一个有效的JSON Web Token。 2. 后端使用的是版本低于 3.3.4 的 Python 库 "python-jwt"。 为了方便使用，我在一次CTF中编写了一个简单的PoC： usage: CVE-2022-39227-PoC -h -j TOKEN -i CLAIM Proof of Concept for the JWT...

PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse

SummaryPyJWT.decode/decodecomplete mutates a caller-supplied options dict in place whenever verifysignature is falsy, adding verifyexp/verifynbf/verifyiat/verifyaud/verifyiss/verifysub/verifyjti keys directly onto that object. If application code reuses the same options dict across calls a config...

CVE-2025-30144

Resumen La librería fast-jwt no valida correctamente la reclamación iss según la RFC https://datatracker.ietf.org/doc/html/rfc7519page-9. Detalles La validación de la reclamación iss emisor dentro de la librería fast-jwt permite un array de cadenas como valor válido de iss. Este defecto de diseño...

GHSA-GVP8-978C-RX2Q PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse

Summary PyJWT.decode/decodecomplete mutates a caller-supplied options dict in place whenever verifysignature is falsy, adding verifyexp/verifynbf/verifyiat/verifyaud/verifyiss/verifysub/verifyjti keys directly onto that object. If application code reuses the same options dict across calls a confi...

PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse

Summary PyJWT.decode/decodecomplete mutates a caller-supplied options dict in place whenever verifysignature is falsy, adding verifyexp/verifynbf/verifyiat/verifyaud/verifyiss/verifysub/verifyjti keys directly onto that object. If application code reuses the same options dict across calls a confi...

EUVD-2026-90388

PyJWT.decode reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse...

AZL-105642 CVE-2026-103001 affecting package python-jwt 2.13.0-1

PyJWT is a Python implementation of JSON Web Token standards. From 2.11.0 through 2.13.0, PyJWT's PyJWT.mergeoptions method can modify a caller-supplied mutable options mapping when verifysignature is false. If an application reuses that same mapping for a later decode or decodecomplete call and...

CVE-2026-103001

PyJWT is a Python implementation of JSON Web Token standards. From 2.11.0 through 2.13.0, PyJWT's PyJWT.mergeoptions method can modify a caller-supplied mutable options mapping when verifysignature is false. If an application reuses that same mapping for a later decode or decodecomplete call and...

CVE-2026-103001

PyJWT is a Python implementation of JSON Web Token standards. From 2.11.0 through 2.13.0, PyJWT's PyJWT.mergeoptions method can modify a caller-supplied mutable options mapping when verifysignature is false. If an application reuses that same mapping for a later decode or decodecomplete call and...

CVE-2026-103001

The PyJWT library (versions 2.11.0 through 2.13.0 ) contains a vulnerability where the PyJWT._merge_options() method modifies a caller-supplied mutable options mapping when verify_signature is set to false . If an application reuses this same mapping for subsequent decode() or decode_complete() c...

CVE-2026-103001 PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse

PyJWT is a Python implementation of JSON Web Token standards. From 2.11.0 through 2.13.0, PyJWT's PyJWT.mergeoptions method can modify a caller-supplied mutable options mapping when verifysignature is false. If an application reuses that same mapping for a later decode or decodecomplete call and...