201 matches found
jwtear
Jwtear セキュリティテスト目的でJSON Web Token（JWT）トークンを解析、作成、操作するためのモジュラー式コマンドラインツール。 機能 完全なモジュール性。 すべてのコマンドはプラグインです。 新しいプラグインの追加が簡単。 JWSおよびJWEトークンをサポート。 プラグインのための簡単なインターフェース。（テンプレート例に従う） 柔軟 プロダクションクラスのライブラリに基づくトークン生成（例：json-jwt、jwe）。 利用可能なプラグイン Parse: JWTトークンを解析します。 jws: JWSトークンを操作および生成します。 jwe:...
CVE-2018-0114-Exploit
CVE-2018-0114-エクスプロイト 0.11.0 より前の Cisco のオープンソースライブラリ node-jose には、認証されていないリモートの攻撃者が、トークンに埋め込まれた鍵を使用してトークンに再署名できる可能性がある脆弱性があります。この脆弱性は、node-jose が JSON Web Token JWT に対して JSON Web Signature JWS 標準に従っていることが原因です。この標準では、公開鍵を表す JSON Web Key JWK を JWS...
cve-2022-39227-jwt-auth-bypass-demo
CVE-2022-39227 JWT 身份验证绕过演示 项目目标 本项目在受控的本地实验室环境中演示 CVE-2022-39227 漏洞。该漏洞影响 python-jwt 库（版本 3.3.4），允许攻击者在不了解密钥的情况下，通过利用 python-jwt 与其依赖 jwcrypto 之间的解析不一致性（JWS 序列化）来伪造 JWT 声明。 技术栈 Python 3.9 Flask （Web 框架） python-jwt 3.3.3 （存在漏洞的版本） python-jwt 3.3.4 （已修复/修补的版本） Docker 和 Docker Compose 项目架构 该项目使用...
POC-CVE-2018-0114
POC-CVE-2018-0114 このリポジトリには、node-jose Stating from the last merge root@kitploit: python lib: base64,urllib,rsa,sys テストの実行 スクリプトを実行するには、次のコマンドを実行します。 root@kitploit: python jwk-node-jose.py "payload" key-size key-size は なし 著者 Andrea Cappa - 初期開発 - GitHub - Twitter Louis Nyffenegger - サポートと協力 -...
CVE-2026-70666
Lemur manages TLS certificate creation. Prior to 1.9.3, an authority-role member could update acmeurl through PUT /api/1/authorities/ without revalidation and direct setupacmeclientnoretry to an attacker-controlled ACME server. ACME directory and order responses contain newNonce, newOrder,...
CVE-2026-50634
A flaw was found in Apache CXF. The JwsJsonContainerRequestFilter component can be exploited to process metadata that has not been authenticated by an accepted signature. This bypasses the application's security assumption that Content-Type or protected HTTP-header metadata originates from a...
CLSA-2026-1784943208 TuxCare security update for jws (3 CVEs)
TuxCare rebuilt jws to address 3 CVEs. Fixed in 0.2.6-tuxcare.1...
python-pyjwt: PyJWT: Denial of Service via processing of crafted detached JWS tokens
A flaw was found in PyJWT. A remote attacker can exploit this by supplying an arbitrarily large Base64URL payload segment when verifying detached JSON Web Signature JWS tokens using the unencoded-payload option. This forces excessive CPU work and memory allocations, leading to a Denial of Service...
EUVD-2026-37805
joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization...
GHSA-JC38-X7X8-2XC8 PHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacks
Summary JWSVerifier::getAlgorithm in src/Library/Signature/JWSVerifier.php line 144 merges protected and unprotected headers using PHP's spread operator: php $completeHeader = ...$signature-getProtectedHeader, ...$signature-getHeader; In PHP, when spreading arrays with duplicate string keys, the...
CVE-2026-48990
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions 1.3.4 through 1.6.5, joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.maxpayloadlength, which can lead to resource exhaustion...
DEBIAN-CVE-2026-48990
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions 1.3.4 through 1.6.5, joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.maxpayloadlength, which can lead to resource exhaustion...
CVE-2026-48990 joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. In versions 1.3.4 through 1.6.5, joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.maxpayloadlength, which can lead to resource exhaustion...
PT-2026-50551
Name of the Vulnerable Software and Affected Versions joserfc versions 1.3.4 through 1.6.5 Description joserfc is a Python library implementing JSON Object Signing and Encryption JOSE standards. The library fails to apply the JWSRegistry.max payload length limit when processing RFC7797 b64=false...
EUVD-2026-32919
PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS...
PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS
!NOTE Practical impact depends on whether request body-size limits are enforced upstream proxy/web-server/framework. Deployments with typical body-size caps ≤2 MB bound the amplifier significantly; deployments accepting larger token inputs are more exposed. When verifying detached JWS tokens usin...
CVE-2026-50634
A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption that accepted Content-Type or protected HTTP-header metadata came from a verified...
CVE-2026-50634
CVE-2026-50634 affects Apache CXF's JwsJsonContainerRequestFilter. The vulnerability allows CXF to process metadata that was not authenticated by the accepted signature, bypassing the assumption that Content-Type or protected HTTP-header metadata came from a verified signature. This can influence...
CVE-2026-50634 Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry
A vulnerability in Apache CXF's JwsJsonContainerRequestFilter can be exploited to cause CXF to process metadata that was not authenticated by the accepted signature. This can bypass the application's assumption that accepted Content-Type or protected HTTP-header metadata came from a verified...