Vulnerabilities
Simple Admin Core 1.8.7 Allows Unauthenticated Super Admin Token Forgery
Attackers exploit a hard-coded secret in Simple Admin Core to forge administrative tokens and seize full system control without valid credentials.
JWT
Everything RedTeam Monitor has reported about JWT: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
fast-jwt 6.2.0-6.2.4 Reopens Critical Token Forgery; Update to 6.3.0 Now
A flawed update in the fast-jwt library re-enables a critical algorithm confusion flaw, allowing attackers to forge authentication tokens using public keys.