Curated security research, vulnerabilities, advisories and tools for practitioners.

#jwt

Security coverage tagged jwt.

1.

CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Login

vulnerability | 2026-08-11 05:13 | CVE-2026-55040 | blog.viettelcybersecurity.com | Original ↗ | .md | #authentication-bypass | #microsoft | #sharepoint

2.

Dojo challenge #52 Streamcore solution

blog | 2026-07-15 11:45 | yeswehack.com | Original ↗ | .md | #appsec | #ctf | #web-security

3.

Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass

vulnerability | High | 2026-05-22 00:00 | CVE-2026-0265 | bishopfox.com | Original ↗ | .md | #authentication-bypass | #jwt | #palo-alto-networks

4.

When Your VPN Opens Your Private Network to the Public

blog | 2026-05-20 00:00 | hacktron.ai | Original ↗ | .md | #ai-security | #cloud | #reverse-engineering

5.

Hacking Crypto Part IV: Web and mobile applications

blog | 2025-12-18 13:00 | bugcrowd.com | Original ↗ | .md | #ai-security | #web-security | #cryptography

6.

Code Assisted Penetration Testing

research | 2025-04-24 00:08 | projectblack.io | Original ↗ | .md | #jwt | #penetration-testing | #methodology

7.

O lado obscuro do JWT: Explorando vulnerabilidades em Tokens.

research | 2024-11-29 15:23 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #jwt | #research

8.

The Dark Side of JWT: Exploiting Token Vulnerabilities

research | 2024-11-29 15:21 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #jwt | #research

9.

Introducing SignSaboteur: forge signed web tokens with ease

research | 2024-06-04 07:25 | portswigger.net | Original ↗ | .md | #burp-suite | #authentication | #jwt

10.

Out of the kernel, into the tokens

vulnerability | 2024-03-08 14:00 | blog.trailofbits.com | Original ↗ | .md | #linux | #jwt | #vulnerability-disclosure

11.

Stealing administrative JWT's through post auth SSRF (CVE-2021-22056)

vulnerability | 2022-01-17 00:00 | CVE-2021-22056 | slcyber.io | Original ↗ | .md | #rce | #vulnerability-research | #exploitation

12.

How to Catch Broken Access Control Security Vulnerabilities in Code Review Part 2

blog | 2022-01-05 00:00 | hackerone.com | Original ↗ | .md | #access-control | #code-review | #privilege-escalation

13.

PimpMyBurp #4: Burp Suite extensions that should get your attention!

vulnerability | 2021-05-19 12:29 | yeswehack.com | Original ↗ | .md | #bug-bounty | #burp-suite | #reconnaissance