3 posts tagged with this
A vulnerability in PyJWT versions prior to 2.12.0 allows JSON Web Tokens containing unknown critical header parameters to be accepted instead of rejected. This issue can lead to authentication bypass or security policy circumvention in applications relying on strict JWT validation.
A vulnerability in the WordPress User Registration & Membership plugin allows attackers to bypass authentication by abusing a vulnerable AJAX endpoint. This article demonstrates a proof-of-concept exploit targeting versions 4.1.2 and earlier.
A remote code execution vulnerability in the pymatgen CIF parser allows maliciously crafted CIF files to execute arbitrary system commands when parsed. This article demonstrates the vulnerability and provides a proof-of-concept exploit.