kong

Kong : L'ingénieur inverse agentique Orchestration LLM pour la rétro-ingénierie de binaires Qu'est-ce que Kong ? La plupart des tâches suivent une relation linéaire : plus une tâche est difficile, plus elle prend généralement de temps. La rétro-ingénierie et l'analyse binaire est une tâche où la...

cve-2014-6271-mengjia-kong

이 저장소에는 README가 없습니다...

kong-pwn

kong-pwn Использует открытый KongAPI для работы в качестве прокси и получения URL метаданных или внутренних URL. CVE-2020-11710 — это не уязвимость, а ошибка конфигурации. Как использовать usage: kong-pwn.py -h -u URL -s SSRF -p PROXY kong-pwn.py: error: the following arguments are required:...

Kong Admin <=2.03 - Admin API Access

Kong Admin through 2.0.3 contains an issue via docker-kong which makes the admin API port accessible on interfaces other than 127.0.0.1. id: CVE-2020-11710 info: name: Kong Admin =2.03 - Admin API Access author: pikpikcu severity: critical description: Kong Admin through 2.0.3 contains an issue v...

CVE-2026-14916

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

CVE-2026-14917

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

CVE-2026-14916 Kong API Gateway Enterprise: JWT Algorithm-Confusion

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

CVE-2026-14916

Kong API Gateway Enterprise is affected by a JWT algorithm-confusion vulnerability in components that validate JWTs for MCP OAuth2 or DataKit integrations. The root cause is a failure to verify that the JWT signing algorithm is compatible with the type of key used for verification, allowing an un...

EUVD-2026-80389

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

CVE-2026-14916 Kong API Gateway Enterprise: JWT Algorithm-Confusion

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

EUVD-2026-80387

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

CVE-2026-14917 Kong API Gateway Enterprise: SAML Authentication bypass

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

CVE-2026-14917

CVE-2026-14917 is a SAML authentication bypass in the Kong API Gateway Enterprise SAML plugin. When the validate_assertion_signature option is explicitly set to false (it is enabled by default ), the plugin extracts the SAML identity from an unsigned assertion without verifying a valid cryptograp...

CVE-2026-14917 Kong API Gateway Enterprise: SAML Authentication bypass

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

CVE-2026-14917: Authentication Bypass Using an Alternate Path or Channel

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

CVE-2026-14916: Improper Handling of Unexpected Data Type

A JWT signature verification vulnerability affects Kong components that perform JWT validation for MCP OAuth2 or DataKit integrations inside Kong API Gateway Enterprise. The affected code does not properly validate that the JWT signing algorithm is compatible with the type of key used for...

CVE-2026-86879

creationtimestamp| type| source ---|---|--- 2026-09-15 05:16:04+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260915 2026-09-15 21:16:33+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19 2026-09-16 22:00:56+00:00|...

CVE-2025-20064

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:36+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2047...

CVE-2026-77180

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:16+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2047 2026-09-03 12:45:06+00:00| seen| https://www.acn.gov.it/portale/w/f5-risolte-vulnerabilita-nei-prodotti-nginx 2026-09-03 13:45:08+00:00| seen|...

CVE-2026-63020

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:05+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2047 2026-09-03 13:45:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mumli32zq72z...