1369 matches found
CVE-2025-54677
Sink: Weak check only checks Content-Type, which leads to RCE system arbitrary file upload vulnerability PoC: Change the Content-Type field to image/png and the file signature to GIF87a...
vulnerability-remediation-cve-2013-3900
🛡️ Remediation of CVE-2013-3900: WinVerifyTrust Signature Validation 📝 Project Overview This project demonstrates a real-world Vulnerability Management Workflow. Using an Azure VM, I hunted down a high-severity signature validation flaw, confirmed it manually via PowerShell, and deployed a...
Venom-JWT
Venom-JWT Penetration Tool - JWT Vulnerability and Secret Cracking Service Penetration Testing Solemn Statement: The techniques, ideas, and tools mentioned in this document are for learning and communication purposes only for security. No one shall use them for illegal purposes or for profit,...
Keycloak - SAML Core Package Signature Validation Flaw
A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Referen...
Fix-WinVerifyTrustSignatureValidationVuln
Fix-WinVerifyTrustSignatureValidationVuln Fix WinVerifyTrust Signature Validation Vulnerability, CVE-2013-39001, QID-3783322 This Fix is intended for 64-bit Windows Computers This PowerShell code is one way to fix the vulnerability - aside from creating a .reg file and using reg import to import...
CVE-2026-29000
CVE-2026-29000 Exploit Generator Rust This repository contains a specialized Rust implementation for exploiting CVE-2026-29000, an authentication bypass vulnerability in pac4j-jwt. The vulnerability stems from a "Signature Validation Skip" when a PlainJWT alg: none is nested within an encrypted J...
CVE-2026-118040
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged...
CVE-2026-118040 Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of cryptographic signatures and improper certificate validation in RadPdfProcessing digital signature validation allow an unauthenticated attacker to cause signature validation to report forged...
[SECURITY] [DLA 4864-1] swupdate security update
Debian LTS Advisory DLA-4864-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara October 26, 2026 https://wiki.debian.org/LTS Package : swupdate Version : 2022.12+dfsg-4+deb12u3 CVE ID : CVE-2025-41259 CVE-2026-109399 Two vulnerabilities were discovered ...
Debian dla-4864 : libswupdate-dev - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4864 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4864-1 [email protected]...
CVE-2026-112518
An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in a privileged network position may be able to impersonate a Kerberos KDC...
EUVD-2026-110126
An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in a privileged network position may be able to impersonate a Kerberos KDC...
CVE-2026-112518
An issue with signature validation affects several Apple platforms, including iOS , iPadOS , macOS Golden Gate , tvOS , visionOS , and watchOS . The root cause stems from insufficient checks, which could allow an attacker in a privileged network position to impersonate a Kerberos KDC . This vulne...
CVE-2026-112518
An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in a privileged network position may be able to impersonate a Kerberos KDC...
CVE-2026-103319
The OPay Payment Gateway for WooCommerce WordPress plugin through 2.5.5 does not properly verify that payment notifications originate from the payment provider, as the secret used to validate their signature is empty by default, allowing unauthenticated attackers to forge a valid notification and...
EUVD-2026-109621
The OPay Payment Gateway for WooCommerce WordPress plugin through 2.5.5 does not properly verify that payment notifications originate from the payment provider, as the secret used to validate their signature is empty by default, allowing unauthenticated attackers to forge a valid notification and...
PT-2026-125208
An issue with signature validation was addressed with improved checks. This issue is fixed in iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. An attacker in a privileged network position may be able to impersonate a Kerberos KDC...
Signature validation bypass
More info at https://github.com/litesaml/lightsaml/security/advisories/GHSA-rm7m-7jq4-gw46...