CVE-2026-29000

此存储库没有 README。...

Principal-HackTheBox

HackTheBox — Principal Dificultad: Media SO: Linux Plataforma: HackTheBox Resumen Aplicación web que ejecuta pac4j-jwt v6.0.3 — vulnerable a CVE-2026-29000. La clave pública RSA está expuesta sin autenticación a través de un endpoint JWKS y puede usarse para forjar un token JWE de administrador...

Exploit for CVE-2026-29000

Lab Demo CVE-2026-29000: pac4j-jwt Authentication Bypass Môi...

Exploit for CVE-2026-29000

CVE-2026-29000: pac4j JWT Authentication Bypass PoC Proof...

Exploit for CVE-2026-29000

🚀 CVE-2026-29000 - pac4j-jwt Authentication Bypass Exploit !...

Exploit for CVE-2026-29000

CVE-2026-29000-pac4j-jwt-auth-byp...

Exploit for CVE-2026-29000

cve-2...

Exploit for CVE-2026-29000

CVE-2026-29000 — pac4j-jwt PlainJWT-in-JWE Authentication Bypa...

Exploit for CVE-2026-29000

CVE-2026-29000 - pac4j-jwt Authentication Bypass PoC Not...

CVE-2026-29000

pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT wi...

CVE-2026-29000

creationtimestamp| type| source ---|---|--- 2026-03-04 22:17:34+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgbcrw7c2u2s 2026-03-05 00:43:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgbkx4u4ue2v 2026-03-05 03:00:29+00:00| seen|...

CVE-2026-29000 pac4j-jwt JwtAuthenticator Authentication Bypass

pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3 contain an authentication bypass vulnerability in JwtAuthenticator when processing encrypted JWTs that allows remote attackers to forge authentication tokens. Attackers who possess the server's RSA public key can create a JWE-wrapped PlainJWT wi...