14782 matches found
Exploit for Injection in Cisco Identity_Services_Engine
CVE-2025-20281 — Cisco ISE ERS API Unauthenticated RCE Exploit...
CVE-2025-38216
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Commit 2031c469f816 "iommu/vt-d: Add support for static identity domain" changed the context entry setup during domain attachment from a set-and-check policy to a...
CVE-2025-3848
The Download Manager and Payment Form WordPress Plugin – WP SmartPay plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 1.1.0 to 2.7.13. This is due to the plugin not properly validating a user's identity prior to updating their email through the update...
CVE-2025-52925
In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka ST-812...
Cisco Identity Services Engine Authorization Issues Vulnerability (CNVD-2025-15609)
Cisco Identity Services Engine Cisco ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users, and devices, and develops and enforces policies to regulate the network. Cisco Identity Services Engine Cisco ISE...
CVE-2025-53003
The Janssen Project is an open-source identity and access management IAM platform. Prior to version 1.8.0, the Config API returns results without scope verification. This has a large internal surface attack area that exposes all sorts of information from the IDP including clients, users, scripts...
Exploit for Injection in Cisco Identity_Services_Engine
CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This scr...
PT-2025-31116 · 'Реак Софт' · Blitz Identity Provider
Уязвимость программного обеспечения Blitz Identity Provider связанна с недостаточным ограничением попыток аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, зарегистрировать учетную запись с почтой, к которой не имеет доступа и подтвердить ее...
CVE-2025-52925
In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka ST-812...
CVE-2025-3848
The WP SmartPay WordPress plugin (versions 1.1.0–2.7.13) is vulnerable to privilege escalation via account takeover due to improper validation in the update() function. An authenticated user with Subscriber level or higher can change arbitrary users’ emails (including admins) and then reset passw...
CVE-2025-52925
The vulnerability CVE-2025-52925 affects One Identity OneLogin Active Directory Connector versions prior to 6.1.5, where DirectoryToken encryption was mishandled (aka ST-812). Affected component: the connector’s encryption handling of DirectoryToken. Reported impact is limited to the mismanagemen...
One Identity OneLogin Active Directory Connector 安全漏洞
One Identity OneLogin Active Directory Connector is a connector software from One Identity USA. A security vulnerability exists in One Identity OneLogin Active Directory Connector versions prior to 6.1.5 that stems from improper handling of DirectoryToken encryption...
The vulnerability of the Blitz Identity Provider software, related to deficiencies in the authentication process, allows a perpetrator to change the email address of a user’s account.
The vulnerability of the Blitz Identity Provider software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to change the email address of a user’s account remotely...
The vulnerability of the Blitz Identity Provider software lies in its insufficient limitation on the number of authentication attempts. This allows a hacker to associate any arbitrary email address with a user account.
The vulnerability of the Blitz Identity Provider software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to associate any email address with a user account...
PT-2025-27583 · One Identity · One Identity Onelogin Active Directory Connector
Name of the Vulnerable Software and Affected Versions: One Identity OneLogin Active Directory Connector versions prior to 6.1.5 Description: The issue concerns the mishandling of DirectoryToken encryption, also known as ST-812. This problem occurred due to an error in the encryption process...
CVE-2025-52925
In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka ST-812...
CVE-2025-52925
In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka ST-812...
The vulnerability of the Blitz Identity Provider software, related to incorrect configuration of access rights, allows a hacker to send an email with arbitrary text to the user’s assigned email address.
The vulnerability of the Blitz Identity Provider software is related to incorrect configuration of access rights. Exploiting this vulnerability could allow a malicious actor to send an email with arbitrary text to the user’s associated account...
CVE-2025-53003 Janssen Config API returns results without scope verification
The Janssen Project is an open-source identity and access management IAM platform. Prior to version 1.8.0, the Config API returns results without scope verification. This has a large internal surface attack area that exposes all sorts of information from the IDP including clients, users, scripts...