Use of Hard-coded Credentials in AgileConfig.Client

Hardcoded JWT Secret in AgileConfig Read More ...

Continue Reading

CVSS3 - CRITICAL

Use of Hard-coded Credentials in AgileConfig.Client

Hardcoded JWT Secret in AgileConfig Read More ...

Continue Reading

CVSS3 - CRITICAL

What are JWT Injections, and Why do You Need to Know About Them

JSON Web Tokens (JWTs for short) are the new standard for transmitting identity information in the digital age. JWTs are JSON objects that act as an identifier for your user or application. They’re u ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - MEDIUM

This Week in Spring – August 23rd, 2022

Hi, Spring fans! Welcome to another installment of _This Week in Spring_! We've got a _ton_ to cover, so let's dive right into it! * [A Bootiful Podcast: Flowable founder Joram Barrez on a Bootiful ...

Continue Reading
CVE-2022-35540

Hardcoded JWT Secret in AgileConfig Read More ...

Continue Reading
Cockpit Content Platform vulnerable to 2FA bypass

Cockpit Content Platform through version 2.2.1 is vulnerable to a two-factor authentication (2FA) bypass. The 2FA secret is disclosed in a JWT token after user logs into their account, allowing an att ...

Continue Reading

CVSS3 - HIGH

Cockpit Content Platform vulnerable to 2FA bypass

Cockpit Content Platform through version 2.2.1 is vulnerable to a two-factor authentication (2FA) bypass. The 2FA secret is disclosed in a JWT token after user logs into their account, allowing an att ...

Continue Reading

CVSS3 - HIGH

Ubuntu 22.04 LTS : PyJWT regression (USN-5526-2)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-5526-2 advisory. Note that Nessus has not tested for this issue but has instead re ...

Continue Reading

Back to Main

Subscribe for the latest news: