24887 matches found
PT-2025-11467
Name of the Vulnerable Software and Affected Versions IcProgress Innovación y Cualificación plugin affected versions not specified Description The issue is related to a broken access control vulnerability in the IcProgress Innovación y Cualificación plugin. This vulnerability allows an attacker t...
PT-2025-13434 · Unknown +1 · Opensaml C++ Library +1
Name of the Vulnerable Software and Affected Versions: OpenSAML C++ library versions prior to 3.3.1 Description: The issue allows forging of signed SAML messages via parameter manipulation when using SAML bindings that rely on non-XML signatures. Recommendations: For versions prior to 3.3.1, upda...
log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
...
NPM xml-crypto: Data forgery vulnerability
NPM xml-crypto is a digital signature and cryptography library from NPM. A security vulnerability exists in NPM xml-crypto version 6.0.0 and earlier that stems from bypassing authentication or authorization mechanisms, allowing an attacker to modify valid signed XML messages...
xml-crypto: Data forgery vulnerability
NPM xml-crypto is a digital signature and encryption library from NPM. A security vulnerability exists in xml-crypto version 6.0.0 and earlier that stems from bypassing authentication or authorization mechanisms, allowing an attacker to modify valid signed XML messages...
CVE-2024-55198
User Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1 password recovery functionality which allows a remote attacker to enumerate users through discrepancies in the responses...
CVE-2024-55198
User Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1 password recovery functionality which allows a remote attacker to enumerate users through discrepancies in the responses...
AZL-73250 CVE-2020-36843 affecting package ed25519-java for versions less than 0.3.0-1
The implementation of EdDSA in EdDSA-Java aka ed25519-java through 0.3.0 exhibits signature malleability and does not satisfy the SUF-CMA Strong Existential Unforgeability under Chosen Message Attacks property. This allows attackers to create new valid signatures different from previous signature...
CVE-2025-26696
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted...
CVE-2024-55198
User Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1 password recovery functionality which allows a remote attacker to enumerate users through discrepancies in the responses...
CVE-2024-55198
User Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1 password recovery functionality which allows a remote attacker to enumerate users through discrepancies in the responses...
CVE-2024-55198: Observable Response Discrepancy
User Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1 password recovery functionality which allows a remote attacker to enumerate users through discrepancies in the responses...
shibboleth-sp -- Parameter manipulation allows the forging of signed SAML messages
The Shibboleth Project reports: An updated version of the OpenSAML C++ library is available which corrects a parameter manipulation vulnerability when using SAML bindings that rely on non-XML signatures. The Shibboleth Service Provider is impacted by this issue, and it manifests as a critical...
CVE-2024-58089 btrfs: fix double accounting race when btrfs_run_delalloc_range() failed
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double accounting race when btrfsrundelallocrange failed BUG When running btrfs with block size 4K smaller than page size 64K, aarch64, there is a very high chance to crash the kernel at generic/750, with the following...
CVE-2024-6538
creationtimestamp| type| source ---|---|--- 2025-03-12 05:41:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7286 2025-04-26 04:07:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13562...
SUSE CVE-2025-26696
Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...
PT-2025-11029
Name of the Vulnerable Software and Affected Versions: Hillstone Next Generation FireWall versions 5.5R8P1 through 5.5R8P22 Description: The issue is related to the generation of error messages containing sensitive information. Recommendations: For Hillstone Next Generation FireWall versions...
Improper Verification of Cryptographic Signature
Overview Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature through the HTTPRedirect binding process. An attacker can manipulate the message processing by appending a malicious SAMLRequest in front of a valid SAMLResponse, leading to the applicati...
DEBIAN-CVE-2025-27773
The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to...
UBUNTU-CVE-2025-27773
The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to...