Establishing Connection...
Our offensive security engineers actively hunt for zero-days and vulnerabilities in popular software to keep the community safe and informed.
An improper authentication verification flaw in the Global Gateway Enterprise management portal allows unauthenticated remote attackers to bypass login controls and gain administrative access via a crafted HTTP header injection.
A Server-Side Request Forgery vulnerability in the OAuth callback handler of AuthLib allows attackers to redirect callback URLs to internal network endpoints, exposing cloud metadata services.
A vulnerability in the JWT validation logic allows attackers to bypass signature verification by switching the algorithm from RS256 to HS256 and using the public key as the secret.