CVE-2021-23207

An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users. An attacker could manipulate RabbitMQ queues and messages by impersonating user...

CVE-2024-11173

CVE-2024-11173 affects the danny-avila/librechat project (git 600d217). An unhandled exception in API request handling can crash the server, causing a full denial of service. Exploitation requires a valid JWT, but LibreChat’s open registration allows attackers to create accounts and trigger the a...

PT-2021-18224

Name of the Vulnerable Software and Affected Versions: Portofino versions prior to 5.2.1 Description: The issue is related to the improper verification of the signature of JSON Web Tokens, allowing for the forging of a valid JWT. Recommendations: For versions prior to 5.2.1, update to version 5.2...