GHSA-63M5-974W-448V Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment

Summary A vulnerability in Fleet’s Windows MDM enrollment flow could allow an attacker to submit forged authentication tokens that are not properly validated. Because JWT signatures were not verified, Fleet could accept attacker-controlled identity claims, enabling enrollment of unauthorized...

EUVD-2021-14521

Malware in sbrugna...

EUVD-2020-8186

Malware in sbrugna...

EUVD-2018-18723

Malware in sbrugna...

EUVD-2016-4180

Malware in sbrugna...

EUVD-2024-45518

Malicious code in bioql PyPI...

EUVD-2023-43066

Malicious code in bioql PyPI...

EUVD-2021-9161

Malicious code in bioql PyPI...

CVE-2021-21990

VMware Workspace one UEM console 2102 prior to 21.2.0.8, 2101 prior to 21.1.0.14, 2011 prior to 20.11.0.27, 2010 prior to 20.10.0.16,2008 prior to 20.8.0.28, 2007 prior to 20.7.0.14,2006 prior to 20.6.0.19, 2005 prior to 20.5.0.46, 2004 prior to 20.4.0.21, 2003 prior to 20.3.0.23, 2001 prior to...

CVE-2021-47121

In the Linux kernel, the following vulnerability has been resolved: net: caif: fix memory leak in cfusbldevicenotify In case of caifenrolldev fail, allocated linksupport won't be assigned to the corresponding structure. So simply free allocated pointer in case of error...

Ivanti Endpoint Manager Mobile < 11.10.0.4 / 11.11.x < 11.11.0.2 Multiple Vulnerabilities

The version of Ivanti Endpoint Manager Mobile, formerly MobileIron Core, running on the remote host is 11.10.0.4, or 11.11.x 11.11.0.2. It is, therefore, affected by multiple vulnerabilities. - A security vulnerability has been identified allowing an unauthenticated threat actor to impersonate an...

CVE-2023-39335

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potentia...

CVE-2023-39335

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potentia...

Security feature bypass

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potentia...

CVE-2023-39335

Ivanti Endpoint Manager Mobile (formerly MobileIron Core) is affected by CVE-2023-39335 across versions 11.10, 11.9, 11.8 and older, enabling an unauthenticated actor to impersonate existing users during device enrollment. Some sources also describe a certificate creation/authentication bypass in...

CVE-2023-39335

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potentia...

CVE-2023-39335

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potentia...

Ivanti Endpoint Manager Security Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager versions 11.11, 11.10, and 11.9 and earlier, which originated from a vulnerability that allows an unauthenticated attacker to impersonate a...

PT-2023-26885 · Ivanti · Ivanti Endpoint Manager Mobile

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager Mobile versions 11.10, 11.9, and 11.8 and older Description: A security issue has been identified that allows an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This...

Ping Identity PingFederate Access Control Error Vulnerability

Ping Identity PingFederate is a flagship software-based federation server in the United States. for identity management. Ping Identity PingFederate suffers from a security vulnerability that stems from the use of the PingOne MFA Adapter to pair new MFA devices without the need for second-factor...