Venom-JWT

Venom-JWT渗透工具 - 针对JWT漏洞和密钥爆破服务渗透测试 郑重声明：文中所涉及的技术、思路和工具仅供以安全为目的的学习交流使用，任何人不得将其用于非法用途以及盈利等目的，否则后果自行承担 。 针对JWT渗透开发的漏洞验证/密钥爆破工具，针对CVE-2015-9235/未验证签名攻击/CVE-2016-10555/CVE-2018-0114/CVE-2020-28042的结果生成用于FUZZ，也可使用字典/字符枚举的方式进行爆破 工具介绍 · 使用说明 · 注意事项 · 技术交流 工具介绍 该工具的诞生背景：...

Keycloak - SAML Core Package Signature Validation Flaw

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Referen...

CVE-2025-54677

Sink：弱校验仅检查 Content-Type，导致系统任意文件上传漏洞，可造成 RCE PoC：将 Content-Type 字段改为 image/png，并将文件签名改为 GIF87a...

CVE-2026-29000

CVE-2026-29000 漏洞利用生成器（Rust） 本仓库包含一个专门用于利用 CVE-2026-29000 的 Rust 实现，该漏洞是 pac4j-jwt 中的一个身份验证绕过漏洞。该漏洞源于当 PlainJWT（alg: none）嵌套在加密的 JWE 容器中时，会发生“签名验证跳过”。 功能特性 自动获取 JWKS：直接从 /api/auth/jwks 端点获取目标服务器的 RSA 公钥。 构造无签名 JWS：使用 None 算法构造带有管理权限声明（ROLEADMIN）的 JWT。 JWE 封装：使用 RSA-OAEP-256 和 A128GCM...

vulnerability-remediation-cve-2013-3900

🛡️ CVE-2013-3900 修复：WinVerifyTrust 签名验证 📝 项目概述 本项目演示了一个真实的漏洞管理工作流程 。通过使用Azure VM，我追踪了一个高严重性的签名验证漏洞，通过PowerShell手动确认，并部署了基于注册表的修复措施，以加固系统防止未经授权的代码执行。 问题 Windows中的WinVerifyTrust 函数存在一个隐蔽漏洞（CVE-2013-3900）。攻击者可以将恶意代码“搭便车”到已签名的文件上而不会破坏数字签名。这意味着即使文件携带恶意代码，它也可能看起来是“可信的”，从而绕过安全检查。 🚨 发现 我首先在Azure...

Fix-WinVerifyTrustSignatureValidationVuln

修复WinVerifyTrust签名验证漏洞 修复WinVerifyTrust签名验证漏洞，CVE-2013-39001，QID-3783322 此修复适用于64位Windows计算机 此PowerShell代码是修复该漏洞的一种方式——除了创建.reg文件并使用reg import 导入新注册表项之外。 完整打包脚本： 如果 HKLM:\Software\Microsoft\Cryptography\Wintrust\Config 路径不存在，则创建路径和项。 如果找到该注册表项，则显示该项的结果——不做任何操作等。 预期的新的注册表项类型为：REGSZ 以下内容摘自MSRC -...

UBUNTU-CVE-2026-71887

In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding signature carried no embedded Primary Key Binding cross-certification signature, in the case where that binding omits a Key Flags subpacket. RFC 9580 sec...

CVE-2026-71887

The Bouncy Castle for Java high-level OpenPGP API (versions before 1.86 ) contains a vulnerability where it accepts data signatures from signing subkeys that lack a required embedded Primary Key Binding signature when the Key Flags subpacket is omitted. The flaw stems from inconsistent logic in O...

CVE-2026-71887 OpenPGP data signature accepted from a signing subkey without cross-certification

In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding signature carried no embedded Primary Key Binding cross-certification signature, in the case where that binding omits a Key Flags subpacket. RFC 9580 sec...

Post-Quantum Authentication Protocol for Internet of Medical Things

IoMT communication systems should provide origin authentication and ensure integrity protection for the messages produced by patients' devices for transmission to gateways and further processing by other hospital services. With regard to IoMT, this paper discusses tampering, impersonation, and...

Rocky Linux 9 [CIQ] Security Update: keylime / keylime-base / keylime-registrar / keylime-selinux / etc (crlsa-2024_1139)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241139 advisory. keylime: Attestation failure when the quote's signature does not validate CVE-2023-3674 Tenable has extracted the preceding description block directly from the CIQ...

Oracle Linux 10 : python-cryptography (ELSA-2026-71658)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71658 advisory. 43.0.0-4 - Fix CVE-2026-69249: add X.509 signature validation budget Tenable has extracted the preceding description block directly from the Oracle Linux...

automation-controller: automation-controller-container: automation-controller: missing use_role authorization on the project signature validation credential foreign key allows a project administrator to bind and use another organization's credential cross-tenant

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. A project has a signature validation credential foreign key used to validate signed project content. Unlike the project's SCM credential, the authorization logic does not verify that the requesting user has use...

automation-controller: automation-controller-container: automation-controller: missing use_role authorization on the project signature validation credential foreign key allows a project administrator to bind and use another organization's credential cross-tenant

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. A project has a signature validation credential foreign key used to validate signed project content. Unlike the project's SCM credential, the authorization logic does not verify that the requesting user has use...

CVE-2026-84643

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. A project has a signature validation credential foreign key used to validate signed project content. Unlike the project's SCM credential, the authorization logic does not verify that the requesting user has use...

CVE-2026-95625 Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade

The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version number, download URL, and signature -- is fetched over TLS but is never itself signed or authenticated. Because the on...

CVE-2026-95625 Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade

The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the raw binary bytes. The update manifest -- which contains the version number, download URL, and signature -- is fetched over TLS but is never itself signed or authenticated. Because the on...

CVE-2026-91814

A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the existing signature, allowing attackers to alter signed content and potentially carry out content spoofing while the...

CVE-2026-91814

Foxit PDF Editor/Reader is vulnerable to a signature validation vulnerability within its handling of incrementally updated PDF documents . The root cause is that modifications to visible document content may not invalidate the existing digital signature. This allows an attacker to alter signed co...

EUVD-2026-85159

A signature validation vulnerability exists in Foxit PDF Editor/Reader’s handling of incrementally updated PDF documents. Changes to visible document content may not invalidate the existing signature, allowing attackers to alter signed content and potentially carry out content spoofing while the...