Sysaid Technologies SysAid 代码问题漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from Sysaid Technologies, Israel. SysAid - Okta SSO integration suffers from a security vulnerability that originates from an unauthenticated attacker being able to exploit an XXE vulnerability by sending a mis-formatted POS...

Malicious Package

Overview identity-site is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview identity-partners-site is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview identity-dev-docs is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview identity-sam-landing is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Cisco Identity Services Engine Authentication Bypass (cisco-sa-ISE-SAML-nuukMPf9)

A vulnerability in the login page of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to log in without credentials and access all roles without any restrictions. This vulnerability is due to exposed sensitive Security Assertion Markup Language SAML metadata. An...

Security Bulletin: Security vulnerability has been identified in IBM DB2 used by IBM Security Verify Governance, Identity Manager virtual appliance component

Summary Information about security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details CVEID:CVE-2021-44280 DESCRIPTION: Attendance Management System is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the...

Security Bulletin: Multiple vulnerabilities in IBM Java affect IBM InfoSphere Identity Insight (CVE-2021-35550, CVE-2021-35603, CVE-2022-21496)

Summary There are multiple vulnerabilities in the IBM Java used in IBM InfoSphere Identity Insight II. These vulnerabilities are addressed. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...

Securing your IoT with Edge Secured-core devices

A recent study conducted by Microsoft in partnership with Ponemon Institute included a survey of companies that have adopted IoT solutions and 65 percent of them mentioned that security is a top priority when implementing IoT. Attacks targeting IoT devices put businesses at risk. Impacted devices...

MAL-2022-1301 Malicious code in azure-communication-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fce91f9bdf08c4b0fc0a41b7d81163d195792e05edbe2d2f8bd0164ff9a05fc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-communication-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fce91f9bdf08c4b0fc0a41b7d81163d195792e05edbe2d2f8bd0164ff9a05fc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac2de66df6e15dc4eef5b9a49c02ff8237d94e47c5043c8b6690b8373b77f38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3bda53456f97f07496332b3abe3ca16054f9a5b0c18627a3d1427a3f417c2a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5285 Malicious code in perf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3bda53456f97f07496332b3abe3ca16054f9a5b0c18627a3d1427a3f417c2a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58c31e90a2d18fa00fa8667905444ac65828ede2b1cf6db09888804b7b191cd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-103 Malicious code in @azure-tests/perf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58c31e90a2d18fa00fa8667905444ac65828ede2b1cf6db09888804b7b191cd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in private-identity-audit-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b1bd9d874421f920c2d168c65c29f9f4cfd20aebdd77c6fdbfd8e4e0935a778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5463 Malicious code in private-identity-audit-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b1bd9d874421f920c2d168c65c29f9f4cfd20aebdd77c6fdbfd8e4e0935a778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in identity-module-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0542d6c493c3b6ae5639bba02c5e0ff7dde9a666fb7204e112c86bf4ddd9747 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3770 Malicious code in identity-module-miniapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0542d6c493c3b6ae5639bba02c5e0ff7dde9a666fb7204e112c86bf4ddd9747 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...