539 matches found
Use of Hard-coded Credentials
Overview Affected versions of this package are vulnerable to Use of Hard-coded Credentials in the AuthN implementation. An attacker can gain unauthorized access to sensitive information, escalate privileges, and tamper with data by leveraging hard-coded credentials. Remediation Upgrade...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization in the AuthN implementation. An attacker can access sensitive information by sending unauthorized requests. Remediation Upgrade github.com/NVIDIA/aistore/api/authn to version 1.3.31 or higher. References - GitHub...
Astra Linux – Vulnerability in pam
A vulnerability was discovered in PAM. Secret information is stored in memory, and the attacker can trigger the victim’s program to execute by sending characters to its standard input stdin. During this process, the attacker can instruct the branch predictor to execute a ROP chain speculatively...
OpenVPN Access Server 安全漏洞
OpenVPN Access Server is a web-based VPN management interface from OpenVPN, Inc. A security vulnerability exists in OpenVPN Access Server versions 2.14.0 through 2.14.3, which stems from the RelayState parameter in the SAML Authentication module not being filtered correctly, which could lead to...
CVE-2025-50055: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 through 2.14.3 allows configured remote SAML Assertion Consumer Service ACS endpoint servers to inject arbitrary web script or HTML via the RelayState parameter...
ROS-20251022-01
Authentication and authorization module for Apache 2.x HTTP server Modauthopenidc vulnerability is related to an information disclosure. Exploitation of the vulnerability allows an attacker acting remotely to disclose protected information...
ROS-20251014-02
A vulnerability in the pamsmauthenticate function of the Yubico pam-u2f PAM module is related to the return of an invalid status code state. Exploitation of the vulnerability could allow an attacker to escalate privileges...
EUVD-2000-0944
Malware in sbrugna...
EUVD-2001-1336
Malware in sbrugna...
EUVD-2016-7572
Malware in sbrugna...
EUVD-2021-25579
Malware in sbrugna...
EUVD-2001-1439
Malware in sbrugna...
EUVD-2005-1826
Malware in sbrugna...
EUVD-1999-1139
Malware in sbrugna...
EUVD-2019-4291
Malware in sbrugna...
EUVD-2014-5177
Malware in sbrugna...
EUVD-2014-5176
Malware in sbrugna...
EUVD-2008-3276
Malware in sbrugna...