Curated security research, vulnerabilities, advisories and tools for practitioners.

#jwt

Security coverage tagged jwt.

1.

CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Login

vulnerability | 2026-08-11 05:13 | CVE-2026-55040 | blog.viettelcybersecurity.com | original ↗ | #authentication-bypass | #microsoft | #sharepoint

2.

Dojo challenge #52 Streamcore solution

blog | 2026-07-15 11:45 | yeswehack.com | original ↗ | #appsec | #ctf | #web-security

3.

Detecting CVE-2026-0265 at Scale: PAN-OS CAS Authentication Bypass

vulnerability | High | 2026-05-22 00:00 | CVE-2026-0265 | bishopfox.com | original ↗ | #authentication-bypass | #jwt | #palo-alto-networks

4.

Hacking Crypto Part IV: Web and mobile applications

blog | 2025-12-18 13:00 | bugcrowd.com | original ↗ | #ai-security | #web-security | #cryptography

5.

Code Assisted Penetration Testing

research | 2025-04-24 00:08 | projectblack.io | original ↗ | #jwt | #penetration-testing | #methodology

6.

Introducing SignSaboteur: forge signed web tokens with ease

research | 2024-06-04 07:25 | portswigger.net | original ↗ | #burp-suite | #authentication | #jwt

7.

Out of the kernel, into the tokens

vulnerability | 2024-03-08 14:00 | blog.trailofbits.com | original ↗ | #linux | #jwt | #vulnerability-disclosure

8.

How to Catch Broken Access Control Security Vulnerabilities in Code Review Part 2

blog | 2022-01-05 00:00 | hackerone.com | original ↗ | #access-control | #code-review | #privilege-escalation

9.

PimpMyBurp #4: Burp Suite extensions that should get your attention!

vulnerability | 2021-05-19 12:29 | yeswehack.com | original ↗ | #bug-bounty | #burp-suite | #reconnaissance