DataEase v2.10.2 - JWT Signature Verification Bypass

DataEase is an open source data visualization analysis tool that helps users quickly analyze data and gain insights into business trends. In affected versions, the lack of signature verification of JWT tokens allows attackers to forge JWTs, which then allow access to any interface. The...

Testability-CVE-2014-1266

TestableSecurity This is a small proof-of-concept that lifts out the vulnerable SSLVerifySignedServerKeyExchange from Apple's libsecurityssl to demonstrate that the signing code is readily unit testable in isolation. While there's been some talk that this bug wasn't easily tested, the code in...

CVE-2022-38691_38692

CVE-2022-38691/38692 persistently boot FDL1/SPL without signature NOTE: first remove sign check of Boot Chain images in FDL1/SPL ​ fdl1 use genfdl1-dl sourcecode ​ spl android 9/10, use genspl-unlock-legacy sourcecode ​ spl android 11+, use genspl-unlock sourcecode ​ windows prebuilt tools can be...

CVE-2024-42461

Solution for ECDSA and EDDSA Signature Verification Problems Description Problems have been identified in the verification of ECDSA and EDDSA signatures in the Wycheproof project. Missing checks during the signature decoding stage allow adding or removing zero bytes, which affects the ability to...

npq

NPQ Documentation This directory contains comprehensive documentation for the NPQ Node Package Quality security auditing tool. Core Documentation optional-features.md Configuration and usage of optional security features, including recent improvements and bug fixes. age.marshall.md Detailed...

CVE-2025-59718-PoC

CVE-2025-59718 Exploit Wizard Overview This tool is a proof-of-concept PoC exploit script for CVE-2025-59718, a critical authentication bypass vulnerability in Fortinet products e.g., FortiOS, FortiProxy, FortiSwitchManager due to improper verification of cryptographic signatures in SAML messages...

CVE-2026-59243_exploit

CVE-2026-59243 — Apache Airflow FAB Provider OAuth 认证绕过 → DAG RCE 在 Apache Airflow 的 FAB auth-manager provider（apache-airflow-providers-fab）中存在认证绕过，可通过触发的 DAG 实现远程代码执行。 该提供程序默认在禁用签名验证的情况下解码 Azure OAuthidtoken（airflow/providers/fab/authmanager/securitymanager/override.py，decodeandvalidateazurejwt）...

CVE-2025-47827

CVE-2025-47827 Proof-of-concept and vulnerability report for CVE-2025-47827. Contents Description Disclosure Impact Detection Mitigation Binaries Proof of Concept Resources Description In IGEL OS before v11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a...

CVE-2024-7479

CVE-2024-7479 TeamViewer Improper signature verification of driver installation Author: Marcos Accossatto For demonstration purposes only. Complete exploit works on vulnerable version on Team Viewer for Windows. Introduction This exploit PoC is a python implementation of Pedro Gabaldon's PoC for...

CVE-2026-8888-Printer-Firmware-Unsigned-Update-via-HTTP

CVE-2026-8888 – 打印机固件未签名更新（通过 HTTP） 程序代码（Python HTTP 服务器 + 打印机模拟器） root@kitploit: !/usr/bin/env python3 printerfirmwareserver.py - Simulated printer that fetches updates over HTTP import requests, hashlib, os FIRMWAREURL = "http://updates.printer.local/firmware.bin" CURRENTVERSION = 1.0 def...

CVE-2020-10759-poc

Summary Exploits CVE-2020-10759 - fwupd PGP signature verification bypass. See https://github.com/justinsteven/advisories/blob/master/2020fwupddanglings3bucketandCVE-2020-10759signatureverificationbypass.md for more details. Requirements Note: You need to install python3-gpg from your OS vendor...

minisign

Minisign 一个极其简单的工具，用于签名文件并验证签名。 目录 Minisign 目录 概述 文档 安装 预构建包 使用 Zig 构建 使用 CMake 和 GCC 或 Clang 构建 用法 生成密钥对 签署文件 验证签名 验证官方发布版本 Docker 与 Signify 的兼容性 签名确定性 其他工具、库与实现 概述 Minisign 是一个用于签名文件并验证签名的工具。它的设计目标是： 简单易用 安全（基于现代密码学） 精简（专注于做好一件事） 跨平台 Minisign 使用 Ed25519 公钥签名系统，签名体积小且速度快。 文档 如需完整文档，请参阅 Minisign ...

CVE-2024-22026

CVE-2024-22026 影响 Ivanti EPMM "MobileIron Core" 的 CVE-2024-22026 漏洞利用 POC CVE-2024-22026 是 Ivanti EPMM（原 MobileIron）服务器版本 12.1.0.0、12.0.0.0 和 11.12.0.1 之前的一个本地权限提升漏洞。该漏洞允许本地攻击者通过利用软件更新过程，从远程 URL 安装恶意 RPM 包，从而获得系统的 root 访问权限。 阅读完整博文以获取详细技术信息：利用 CVE-2024-22026：获取 Ivanti EPMM（MobileIron Core）的 root ...

jwt-key-id-injector

JWT Key ID Injector JWTの仮想的な脆弱性をチェックするためのシンプルなPythonスクリプト。 HS256アルゴリズムで署名されたJWTトークンを使用するアプリケーションがあるとします。トークンの例は次のようになります: root@kitploit: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.zbgd5BNF1cqQprCEqIvBTjSxMS8bDLnJAEwE-0Cxg...

Starlink-FI

Starlink 用户终端 Modchip 本仓库与题为“人类在地球上引发的故障：SpaceX Starlink 用户终端的黑盒安全评估”的演讲配套。 幻灯片可在此处获取，演讲录像不久后应可观看。 该演讲介绍了我们如何利用一枚执行电压故障注入的自制 modchip，在 Starlink 用户终端上实现任意代码执行。 该 modchip 可用于在片上系统（SoC）ROM 引导加载程序（BL1）执行期间绕过签名验证。从而允许从 BL2 开始，在 SoC 上执行任意代码，并允许进一步探索 Starlink 用户终端以及系统的网络侧。 我们提供了 modchip...

CVE-2026-25250

🕷️ CVE-2026-25250: Improper Trusted Bootloader Chain Validation A Microsoft-signed third-party bootloader that loads a secondary EFI binary with no signature or integrity verification, collapsing the Secure Boot chain of trust from within. 📑 Table of Contents Research Context Official References...

CVE-2022-21449

CVE 2022 21449 python implementation This project allows you to: Plot an elliptic curve with desired parameters, over a finite field or not Generate a key pair from a given elliptic curve Encrypt / Decrypt a message via ECIES Sign / verify using ECDSA Simulate an exploitation of CVE 2022 21449 Fi...

CVE-2026-13447

The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verifyidtoken function, which decodes and validates Firebase ID token...

CVE-2026-13447 MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery

The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verifyidtoken function, which decodes and validates Firebase ID token...

EUVD-2026-71838

The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verifyidtoken function, which decodes and validates Firebase ID token...