220 matches found
CVE-2022-1162
CVE-2022-1162 A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML in GitLab CE/EE versions 14.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowing attackers to potentially take over accounts. Exploit: New Gitlab Accounts...
GitLab CE/EE - Hard-Coded Credentials
GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...
Malicious code in omniauth-recharge-rails-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...
MAL-2026-14526 Malicious code in omniauth-recharge-rails-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...
EUVD-2017-0228
Malware in sbrugna...
EUVD-2019-0585
Malware in sbrugna...
EUVD-2017-0216
Malware in sbrugna...
EUVD-2020-1480
Malware in sbrugna...
EUVD-2020-1445
Malware in sbrugna...
EUVD-2017-8873
Malware in sbrugna...
EUVD-2018-0158
Malware in sbrugna...
EUVD-2020-5574
Malware in sbrugna...
EUVD-2022-6596
Malicious code in bioql PyPI...
EUVD-2024-0260
Malicious code in bioql PyPI...
EUVD-2025-29406
Malicious code in bioql PyPI...
EUVD-2022-2099
Malicious code in bioql PyPI...
EUVD-2024-16978
Malicious code in bioql PyPI...
EUVD-2022-4629
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2018-8971
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Auth0 integration in GitLab before 10.3.9, 10.4.x before 10.4.6, and 10.5.x before 10.5.6 has an incorrect omniauth-auth0 configuration, leading to signing ...