POC-CVE-2018-0114

POC-CVE-2018-0114 Questa repository contiene il POC di un exploit per node-jose Stating from the last merge root@kitploit: python lib: base64,urllib,rsa,sys...

CVE-2018-0114

CVE-2018-0114 Exploit per Node-jose 0.11.0 scritto in Ruby Utilizzo inserisci semplicemente il nome della vittima nel codice ed esegui il file tramite ruby ./exploit.rb Una vulnerabilità nella libreria open source Cisco node-jose precedente alla versione 0.11.0 potrebbe consentire a un attaccante...

CVE-2018-0114

CVE-2018-0114 vor 0.11.0 Ein nicht authentifizierter entfernter Angreifer kann mit einem im Token eingebetteten Schlüssel neu signieren. https://www.cvedetails.com/cve/CVE-2018-0114/...

CVE-2018-0114

A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature JWS standard for JSON Web Tokens JWTs...

CVE-2018-0114

CVE-2018-0114 affects the Cisco node-jose library prior to 0.11.0. The flaw arises when a JSON Web Signature (JWS) header can carry a JWK (public key) that is then trusted for verification. An unauthenticated, remote attacker could forge valid JWS objects by removing the original signature, inser...

Cisco node-jose open source library security bypass vulnerability

Cisco node-jose open source library is the United States Cisco Cisco company based on a Web browser and node.js server JSON object signing and encryption of open source library . A security bypass vulnerability exists in the Cisco node-jose open source library that stems from node-jose's use of t...