220 matches found
GitLab CE/EE - Hard-Coded Credentials
GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...
CVE-2022-1162
CVE-2022-1162 Se estableció una contraseña fija para las cuentas registradas mediante un proveedor OmniAuth por ejemplo, OAuth, LDAP, SAML en GitLab CE/EE versiones 14.7 anteriores a 14.7.7, 14.8 anteriores a 14.8.5 y 14.9 anteriores a 14.9.2, lo que permite a atacantes potencialmente tomar el...
Malicious code in omniauth-recharge-rails-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...
MAL-2026-14526 Malicious code in omniauth-recharge-rails-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...
EUVD-2017-0228
Malware in sbrugna...
EUVD-2019-0585
Malware in sbrugna...
EUVD-2017-0216
Malware in sbrugna...
EUVD-2020-1480
Malware in sbrugna...
EUVD-2020-1445
Malware in sbrugna...
EUVD-2017-8873
Malware in sbrugna...
EUVD-2018-0158
Malware in sbrugna...
EUVD-2020-5574
Malware in sbrugna...
EUVD-2022-6596
Malicious code in bioql PyPI...
EUVD-2024-0260
Malicious code in bioql PyPI...
EUVD-2025-29406
Malicious code in bioql PyPI...
EUVD-2022-2099
Malicious code in bioql PyPI...
EUVD-2024-16978
Malicious code in bioql PyPI...
EUVD-2022-4629
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2018-8971
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Auth0 integration in GitLab before 10.3.9, 10.4.x before 10.4.6, and 10.5.x before 10.5.6 has an incorrect omniauth-auth0 configuration, leading to signing ...