EUVD-2022-4540

Malicious code in bioql PyPI...

EUVD-2023-2270

Malicious code in bioql PyPI...

EUVD-2024-16918

Malicious code in bioql PyPI...

KLA88513 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to bypass security restrictions. Below is a complete list of vulnerabilities: 1. Signature-Based Trust Bypass vulnerability can be exploited to bypass security restrictions. 2. Improper...

Two New Supermicro BMC Bugs Allow Malicious Firmware to Evade Root of Trust Security

Cybersecurity researchers have disclosed details of two security vulnerabilities impacting Supermicro Baseboard Management Controller BMC firmware that could potentially allow attackers to bypass crucial verification steps and update the system with a specially crafted image. The medium-severity...

Linux Distros Unpatched Vulnerability : CVE-2021-28091

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature. CVE-2021-28091 Note that Nessus relies on the presence of the package ...

CVE-2025-55229

Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-55229

Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network...

Windows Certificate Spoofing Vulnerability

Improper verification of cryptographic signature in Windows Certificates allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-54982

An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...

CVE-2025-54982

CVE-2025-54982 concerns Zscaler's SAML authentication where the server-side verification of cryptographic signatures is improper, enabling authentication abuse. Public records describe the vulnerability as a cryptographic signature validation weakness that could allow bypassing authentication con...

CVE-2025-54982 SAML 2.0 Public Key Validation Issue

An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...

CVE-2025-54982 SAML 2.0 Public Key Validation Issue

An improper verification of cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed an authentication abuse...

PT-2025-31904 · Zscaler · Zscaler

Name of the Vulnerable Software and Affected Versions: Zscaler affected versions not specified Description: An improper verification of a cryptographic signature in Zscaler's SAML authentication mechanism on the server-side allowed for authentication abuse. Recommendations: At the moment, there i...

The vulnerability of the Voice Control voice control function in the macOS operating system allows a hacker to disclose protected information.

The vulnerability of Voice Control, a voice control function in the macOS operating system, is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to disclose protected information...

Improper Verification of Cryptographic Signature

Overview @node-saml/node-saml is a SAML 2.0 implementation for Node.js Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to loading assertions from unsigned response documents. An attacker can alter authentication details, such as modifying t...

Improper Verification of Cryptographic Signature

Overview node-saml is a SAML 2.0 Library Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature due to loading assertions from unsigned response documents. An attacker can alter authentication details, such as modifying the username in a SAML assertio...

Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to signature forgery due to the node-forge package (CVE-2022-24771, CVE-2022-24772 )

Summary Node-forge is used by DataStage on Cloud Pak for Data as part of connection encryption. Vulnerability Details CVEID:CVE-2022-24771 DESCRIPTION: Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS1 v1.5 signatu...

Improper Verification Of Cryptographic Signature

Clerk is vulnerable to improper verification of cryptographic signature. The vulnerability is due to the use of the verifyWebhook helper, which may accept improperly signed webhook events, allowing an attacker to forge webhook requests and potentially trigger unauthorized actions...

The vulnerability of Windows Defender Application Control on Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of Windows Defender Application Control WDAC on Windows operating systems is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow a hacker to circumvent existing security restrictions...