⤷ Title: Kafka Authentication Bypass in the OAUTHBEARER JWT Path
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 12:01:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Kafka #Authentication Bypass #JWT #OAUTHBEARER #oss_security #SASL
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 10 Jul 2026 12:01:48 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Kafka #Authentication Bypass #JWT #OAUTHBEARER #oss_security #SASL
Daily CyberSecurity
Kafka Authentication Bypass in the OAUTHBEARER JWT Path
TL;DR A researcher disclosed a Kafka authentication bypass in the OAUTHBEARER login path. It affects Apache Kafka 4.0.0 through 4.0.x. An attacker can replay a captured JWT long after it expires. …
⤷ Title: JWT Security: Common Vulnerabilities and How to Test Them
════════════════════════
𐀪 Author: Daniel Nweke
════════════════════════
ⴵ Time: Sat, 11 Jul 2026 16:48:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #jwt #ethical_hacking #api_security
════════════════════════
𐀪 Author: Daniel Nweke
════════════════════════
ⴵ Time: Sat, 11 Jul 2026 16:48:02 GMT
════════════════════════
⌗ Tags: #cybersecurity #penetration_testing #jwt #ethical_hacking #api_security
Medium
JWT Security: Common Vulnerabilities and How to Test Them
Learn how to identify, test, and prevent the most common JWT vulnerabilities with practical techniques used during real-world pentesting
⤷ Title: Django REST Framework’te JWT Güvenliği: Access Token, Refresh Token, HttpOnly Cookie
════════════════════════
𐀪 Author: Sümeyye Karataş
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 07:29:14 GMT
════════════════════════
⌗ Tags: #jwt #api_security #django_rest_framework #django #backend_development
════════════════════════
𐀪 Author: Sümeyye Karataş
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 07:29:14 GMT
════════════════════════
⌗ Tags: #jwt #api_security #django_rest_framework #django #backend_development
Medium
Django REST Framework’te JWT Güvenliği: Access Token, Refresh Token, HttpOnly Cookie
Giriş: JWT sadece login endpoint’i değildir.
⤷ Title: HTB Bobby’s Bistro Writeup
════════════════════════
𐀪 Author: Shenyuchao
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 05:01:03 GMT
════════════════════════
⌗ Tags: #htb #htb_writeup #jwt_token #sql_injection
════════════════════════
𐀪 Author: Shenyuchao
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 05:01:03 GMT
════════════════════════
⌗ Tags: #htb #htb_writeup #jwt_token #sql_injection
Medium
HTB Bobby’s Bistro Writeup
Challenge Scenario
⤷ Title: I Funded a Stranger’s Bank Card With My Own Money; and That’s Exactly the Problem
════════════════════════
𐀪 Author: Muhammad Usman Faridi
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 21:00:51 GMT
════════════════════════
⌗ Tags: #api_security #bola #ethical_hacking #cybersecurity #jwt_token
════════════════════════
𐀪 Author: Muhammad Usman Faridi
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 21:00:51 GMT
════════════════════════
⌗ Tags: #api_security #bola #ethical_hacking #cybersecurity #jwt_token
Medium
I Funded a Stranger’s Bank Card With My Own Money; and That’s Exactly the Problem
A hands-on walkthrough of Broken Object Level Authorization (BOLA) on VulnBank
⤷ Title: Is Your Authentication Secure? Auditing HS256 JWTs the Right Way
════════════════════════
𐀪 Author: writtenbyniv
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 11:57:54 GMT
════════════════════════
⌗ Tags: #cryptography #application_security #jwt #cybersecurity #python
════════════════════════
𐀪 Author: writtenbyniv
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 11:57:54 GMT
════════════════════════
⌗ Tags: #cryptography #application_security #jwt #cybersecurity #python
Medium
Is Your Authentication Secure? Auditing HS256 JWTs the Right Way
JSON Web Tokens (JWTs) are the backbone of modern web authentication. They handle everything from user sessions to granular API access…
⤷ Title: Don’t Trust the Token — The Art of JWT Attacks
════════════════════════
𐀪 Author: Muhab A.
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 15:38:49 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #cybersecurity #jwt #jwt_token
════════════════════════
𐀪 Author: Muhab A.
════════════════════════
ⴵ Time: Sat, 18 Jul 2026 15:38:49 GMT
════════════════════════
⌗ Tags: #bug_bounty_tips #bug_bounty #cybersecurity #jwt #jwt_token
Medium
Don’t Trust the Token — The Art of JWT Attacks
One token. Every door open.
⤷ Title: Token Authentication in Microservices
════════════════════════
𐀪 Author: Bojjapavithradurga
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 07:20:57 GMT
════════════════════════
⌗ Tags: #authentication #microservices #software_architecture #jwt #api_security
════════════════════════
𐀪 Author: Bojjapavithradurga
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 07:20:57 GMT
════════════════════════
⌗ Tags: #authentication #microservices #software_architecture #jwt #api_security
Medium
Token Authentication in Microservices
Ever wondered how apps know who you are and what you’re allowed to do? Let’s break down token authentication from scratch — with real…
⤷ Title: CVE-2026-56451: CVSS 10 Siemens Opcenter X Flaw Grants Full Unauthorized Access
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 12:53:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #ICS #JWT #Opcenter X #Siemens
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 12:53:30 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Authentication Bypass #ICS #JWT #Opcenter X #Siemens
Daily CyberSecurity
CVE-2026-56451: CVSS 10 Siemens Opcenter X Flaw Grants Full Unauthorized Access
TL;DR Siemens has patched a maximum-severity Opcenter X authentication bypass, tracked as CVE-2026-56451. The flaw scores 10.0 on both CVSS 3.1 and CVSS 4.0 scales. An unauthenticated remote attac…
⤷ Title: JWT Security — TryHackMe
════════════════════════
𐀪 Author: Fuad Hasan
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 07:59:24 GMT
════════════════════════
⌗ Tags: #tryhackme #jwt #jwt_token #thm_writeup #toreno79
════════════════════════
𐀪 Author: Fuad Hasan
════════════════════════
ⴵ Time: Sat, 25 Jul 2026 07:59:24 GMT
════════════════════════
⌗ Tags: #tryhackme #jwt #jwt_token #thm_writeup #toreno79
Medium
JWT Security — TryHackMe
Here I will show you how to find all flags in this room. So that’s your clear task: 1, 2, 3 first. Just read this task detail and answer…