jwt_tool

The JSON Web Token Toolkit v2 jwttool.py is a toolkit for validating, forging, scanning and tampering JWTs JSON Web Tokens. Its functionality includes: Checking the validity of a token Testing for known exploits: CVE-2015-2951 The alg=none signature-bypass vulnerability CVE-2016-10555 The RS/HS25...

EUVD-2014-6663

Malware in sbrugna...

FireTail Unveils Free Access for All to Cutting-Edge API Security Platform

McLean, United States of America, 26th June 2024, CyberNewsWire...

CVE-2014-6785

The Renny McLean Ministries aka com.subsplash.thechurchapp.sGJQX72 application 2.8.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Renny McLean Ministries aka com.subsplash.thechurchapp.sGJQX72 application 2.8.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6785

The CVE-2014-6785 entry concerns the Renny McLean Ministries Android app (package com.subsplash.thechurchapp.s_GJQX72) version 2.8.1. The root cause is the app’s failure to verify X.509 certificates when establishing TLS connections to SSL servers, enabling potential man-in-the-middle attackers t...