JWT | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Plug Security Holes in React Apps That Can Lead to API Exploitation	SSO JWT Broken Authentication Missing Authentication	Siemens	Eaton Z. (@XeEaton)
Writing Burp Bambda Filters Like a Boss	JWT Broken Authorization	Undisclosed	Dana Epp (@DanaEpp)
Security Vulnerabilities in CasaOS	Authentication Bypass JWT RCE Security Code Review	CasaOS	Thomas Chauchefoin (@Swapgs)
[P2O Vancouver 2023] SharePoint Pre-Auth RCE chain (CVE-2023–29357 & CVE-2023–24955)	RCE Authentication Bypass JWT Code Injection Security Code Review	Microsoft (Sharepoint)	Nguyễn Tiến Giang (@Testanull)
Escalating Privileges With SSRF	SSRF JWT	Undisclosed	Kuldeep Pandya (@Kuldeepdotexe)
How I was able to get account takeover via IDOR form JWT	JWT IDOR Bruteforce Self-XSS Account Takeover	Undisclosed	Mohamed Reda (@M0x0101)
What is kong & why we’re relying on it	RCE Sandbox Escape Authentication Bypass Hardcoded Credentials Broken Access Control Privilege Escalation JWT	Konga	Laluka (@TheLaluka)
Privilege Escalations through Integrations	Privilege Escalation Amazon Cognito Misconfiguration JWT Account Takeover	Undisclosed	Colin McQueen
From Django Debug Mode to PII Data Leak of more than 500+ Employees due Broken Access Control and IDOR	Debug Mode Enabled IDOR Information Disclosure JWT Broken Access Control Exposed Registration Page	Undisclosed	Aayush Vishnoi (@AayushVishnoi10)
Clipchamp ( Microsoft Office Product) - Google IAP Authorization bypass allowed access to Internal Environment Leading to Zero Interaction Account takeover	Authorization Bypass JWT Account Takeover	Microsoft (ClipChamp)	Vikas Anil Sharma (@Vikzsharma)
GitHub Security Lab audited DataHub: Here’s what they found	SSRF Insecure Deserialization Cypher Injection Authentication Bypass Authorization Bypass XSS Open Redirect JWT JSON Injection Cryptographic Issues Session Expiration Issue Security Code Review	DataHub	Alvaro Muñoz (@Pwntester) Michael Stepankin (@Artsploit) Peter Stöckli (@Ulldma) Kevin Stubbings Jorge Rosillo (@Jorge_ctf) Sylwia Budzynska
Technical Advisory – Azure B2C – Crypto Misuse and Account Compromise	Cryptographic Issues JWT Account Takeover Authentication Bypass	Microsoft (Azure)	John Novak
Hacking our way into internal DBs with hardcoded authentication keys	JWT SSO Authentication Bypass Security Misconfiguration	Undisclosed	Ophion Security (@OphionSecurity)
Authentication Bypass in Izanami Docker image 1.10.22 CVE-2023-22495	Authentication Bypass JWT Security Code Review Container Security	Izanami	Raphaël Lob
Exploiting Hardcoded Keys to achieve RCE in Yellowfin BI	RCE Authentication Bypass Security Code Review JWT	Yellowfin BI	Maxwell Garrett (@TheGrandPew) Shubham Shah (@Infosec_au)
SSD Advisory – Cisco Secure Manager Appliance jwt_api_impl Hardcoded JWT Secret Elevation of Privilege	Hardcoded Credentials Security Code Review JWT Privilege Escalation	Cisco	-
23000$ for Authentication Bypass & File Upload & Arbitrary File Overwrite	JWT Authentication Bypass Arbitrary File Write Unrestricted File Upload	Undisclosed	Souhaib Naceri (@H4x0r_dz)
Exploits Explained: 5 Unusual Authentication Bypass Techniques	Authentication Bypass JWT CMS SSO	Undisclosed	Ozgur Alp (@Ozgur_bbh)
ASP.NET Boilerplate Multiple Vulnerabilities	Broken Authentication Hardcoded Credentials JWT Padding Oracle Attack Cryptographic Issues	Volosoft (ASP.NET Boilerplate)	Sana Oshika (@Bigshika)
Hacking into the worldwide Jacuzzi SmartTub network	SPA Android JWT Privilege Escalation Mass Assignment	Jacuzzi Group SmartTub	Eaton Z. (@XeEaton)
Eye for an eye: Unusual single click JWT token takeover	Open Redirect JWT Account Takeover	JetBrains	Yurii Sanin (@SaninYurii)
Each and every request make sense…	Privilege Escalation Exposed JWT Generation Endpoint JWT	Undisclosed	Akshar Tank
Multiple Address Bar Spoofing Vulnerabilities In Mobile Browsers	Authentication Bypass JWT Android	NHS COVID-19 App	James Sanderson (@Zofrex)
Unauthorized access to all the user’s account.	Account Takeover Authentication Bypass JWT	Undisclosed	Rahul Naidu
5 Ways to do Account Takeover in a Single Website	Account Takeover Lack of Rate Limiting OTP Bypass IDOR OAuth JWT	Undisclosed	Letmeslidein (@VasuYadaav)

Page 1 of 2