Browse / Bypasses / Token and signature checks

Getting past token and signature checks

JWT, HMAC, signature and API token validation. 13 disclosed reports got past one.

1. [api.easy2pay.co] SQL Injection at fortumo via TransID parameter [Bypassing Signature Validation🔥]SQL Injection · Razer
   $4,000232 votes
2. Incorrect authorization to the intelbot service leading to ticket informationImproper Authentication - Generic · critical · TikTok
   $15,000219 votes
3. SAML Signature verification bypass allows logging into any user (with specific conditions)Improper Access Control - Generic · critical · GitHub
   196 votes
4. Account takeover - improper validation of jwt signature (with regards to experiation date claim)Improper Authorization · high · Linktree
   147 votes
5. POST /api/bitcoinWithdrawalFees returns financial data without authentication despite being documented as a USER OPERATION (private endpoint)Improper Authentication - Generic · medium · CoinMate.io
   93 votes
6. PS4 BD-J privilege escalation using nested JARPrivilege Escalation · medium · PlayStation
   $2,50086 votes
7. HMAC signature verification omits endpoint and payload allowing request forgery on CoinMate APIMissing Required Cryptographic Step · low · CoinMate.io
   66 votes
8. Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDCImproper Authentication - Generic · high · Nextcloud
   $2,50055 votes
9. [jitsi-meet] Authentication Bypass when using JWT w/ public keysImproper Authentication - Generic · medium · 8x8
   37 votes
10. X-E2EE-SIGNATURE verification can be bypassed, leading to loss of confidentiality of end-to-end encrypted filesImproper Certificate Validation · medium · Nextcloud
    27 votes
11. Unauthenticated blind SSRF in Circles signature verification bypasses Nextcloud local-address protectionsServer-Side Request Forgery (SSRF) · medium · Nextcloud
    15 votes
12. Password token validation in Weblate Bypass #2Improper Authentication - Generic · Weblate
    7 votes
13. Password token validation in Weblate BypassImproper Authentication - Generic · Weblate
    5 votes