392 matches found
EUVD-2013-0528
Malware in sbrugna...
EUVD-2020-6520
Malware in sbrugna...
EUVD-2021-14844
Malware in sbrugna...
EUVD-2019-16258
Malware in sbrugna...
EUVD-2021-19471
Malware in sbrugna...
EUVD-2022-34825
Malicious code in bioql PyPI...
EUVD-2024-22940
Malicious code in bioql PyPI...
EUVD-2022-15669
Malicious code in bioql PyPI...
EUVD-2025-28980
Malicious code in bioql PyPI...
EUVD-2024-20839
Malicious code in bioql PyPI...
EUVD-2023-24333
Malicious code in bioql PyPI...
Openfire < 5.0.2 / 5.1.0 Identity Spoofing
The remote host is running a version of Openfire that is affected by an identity spoofing vulnerability. Openfireâs SASL EXTERNAL mechanism for client TLS authentication contains a vulnerability in how it extracts user identities from X.509 certificates. Instead of parsing the structured ASN.1...
CVE-2025-59154
Openfire is an XMPP server licensed under the Open Source Apache License. Openfire’s SASL EXTERNAL mechanism for client TLS authentication contains a vulnerability in how it extracts user identities from X.509 certificates. Instead of parsing the structured ASN.1 data, the code calls...
CVE-2025-59154 Openfire allows potential identity spoofing via unsafe CN parsing
Openfire is an XMPP server licensed under the Open Source Apache License. Openfire’s SASL EXTERNAL mechanism for client TLS authentication contains a vulnerability in how it extracts user identities from X.509 certificates. Instead of parsing the structured ASN.1 data, the code calls...
CVE-2025-59154
Openfire’s SASL EXTERNAL client TLS authentication uses X509Certificate.getSubjectDN().getName() with a regex to extract CN, producing a provider-dependent string that can fail to escape characters. This allows crafted DN values (e.g., OU="CN=admin,") to masquerade as another user by spoofing the...
PT-2025-37255
Name of the Vulnerable Software and Affected Versions: Flask-AppBuilder versions prior to 4.8.1 Description: Flask-AppBuilder is an application development framework. When configured to use OAuth, LDAP, or other non-database authentication methods, the password reset endpoint remains accessible...
Linux Distros Unpatched Vulnerability : CVE-2016-3176
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Salt before 2015.5.10 and 2015.8.x before 2015.8.8, when PAM external authentication is enabled, allows attackers to bypass the configured authentication servic...
IBM OpenPages Risk Management Insufficient Input Sanitization
The vulnerability of IBM OpenPages and IBM OpenPages with Watson risk management platforms lies in the lack of proper input sanitization when requesting external authentication servers. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
Security Bulletin: IBM Sterling External Authentication Server is vuulnerable due to path-to-regexp (CVE-2024-45296).
Summary IBM Sterling External Authentication Server uses the npm path-to-regexp, which is vulnerable to CVE-2024-45296. Vulnerability Details CVEID:CVE-2024-45296 DESCRIPTION: path-to-regexp turns path strings into a regular expressions. In certain cases, path-to-regexp will output a regular...
CVE-2024-25618
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows new identities from configured authentication providers CAS, SAML, OIDC to attach to existing local users with the same e-mail address. This results in a possible account takeover if the authentication...