jwt-key-confusion-poc

JWT Key Confusion PoC CVE-2015-9235 Escrito para os desafios do Hack the Box - Under Construction e Secret Ambos os scripts incluídos realizam um ataque de confusão de chave de Java Web Token CVE-2015-9235. Para realizar o ataque, é necessário que o atacante conheça a chave pública que o servidor...

ROOT-APP-NPM-CVE-2015-9235 CVE-2015-9235 in jsonwebtoken - Patched by Root

Root has patched CVE-2015-9235 in the jsonwebtoken package for Root:npm. Multiple fixed versions available...

CVE-2015-9235

creationtimestamp| type| source ---|---|--- 2025-01-27 22:00:06+00:00| published-proof-of-concept| Telegram/IIMMVR0y14HHoe0fDF24Y-XgfvnmWXYVKaXhSDz5tV5TerE 2025-01-28 13:54:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/11760 2025-02-05 19:34:25+00:00| published-proof-of-concept...

express-jwt (>=2.0.0, <=2.0.1), maglev (>=3.0.1, <=3.1.1) potentially affected by CVE-2015-9235 via jsonwebtoken (4.0.0)

jsonwebtoken NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jsonwebtoken and may be impacted: - express-jwt =2.0.0, =3.0.1, =3.1.1 Source cves: CVE-2015-9235 Source advisory: OSV:GHSA-C7HR-J4MJ-J2W6...