CVE-2023-20238 - Breaking Down the Cisco BroadWorks SSO Token Flaw
---
Cisco’s BroadWorks Application Delivery Platform and BroadWorks Xtended Services Platform are widely used in the telecommunications industry. In 2023, a significant vulnerability was
CVE-2023-40171 - How a JWT Secret Leak in Dispatch Could Lead to Full Account Takeover
---
Overview
In mid-2023, a critical security vulnerability was discovered in Dispatch, an open-source incident management solution. Tracked as CVE-2023-40171, this flaw could allow attackers
CVE-2023-3518 - Critical JWT Auth Flaw in HashiCorp Consul 1.16. Service Mesh (Exclusive Deep Dive)
In June 2023, a serious security issue was discovered in HashiCorp's popular Consul and Consul Enterprise (version 1.16.), specifically tied to its
CVE-2023-33371 - How Hardcoded JWT Key in Control ID IDSecure 4.7.26. Lets Attackers Bypass Authentication
CVE-2023-33371 is a newly disclosed and critical vulnerability found in Control ID IDSecure versions 4.7.26. and earlier. The core issue? The software uses
CVE-2023-35134 - Password Reset in Weintek Weincloud v.13.6 with Only a JWT Token
In this post, we’ll break down a real-world vulnerability: CVE-2023-35134. Found in Weintek Weincloud v.13.6, this flaw lets an attacker reset a
Episode
00:00:00
00:00:00