131 matches found
The vulnerability of the JWT Signing Key Handler component in the OneLogin software, which allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the JWT Signing Key Handler component in the OneLogin AD Connector software allows unauthorized access to protected information in the error-prone data area. Exploiting this vulnerability can enable a malicious actor to gain unauthorized access to sensitive data...
OneLogin ruby-saml 数据伪造问题漏洞
Onelogin OneLogin ruby-saml is a Ruby-based SAML Security Assertion Markup Language library for Single Sign-On SSO services from Onelogin, USA. A data forgery issue vulnerability exists in OneLogin ruby-saml version 1.12.4 and earlier, which stems from XML parsing differences and could lead to...
EUVD-2019-0118
Malware in sbrugna...
EUVD-2016-1922
Malware in sbrugna...
EUVD-2019-0609
Malware in sbrugna...
EUVD-2025-19635
Malicious code in bioql PyPI...
EUVD-2025-19634
Malicious code in bioql PyPI...
EUVD-2025-21947
Malicious code in bioql PyPI...
EUVD-2025-19636
Malicious code in bioql PyPI...
EUVD-2025-29110
Malicious code in bioql PyPI...
EUVD-2025-19689
Malicious code in bioql PyPI...
OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps
A high-severity security flaw has been disclosed in the One Identity OneLogin Identity and Access Management IAM solution that, if successfully exploited, could expose sensitive OpenID Connect OIDC application client secrets under certain circumstances. The vulnerability, tracked as CVE-2025-5936...
CVE-2025-59363
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...
CVE-2025-59363
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...
CVE-2025-59363: Incorrect Resource Transfer Between Spheres
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...
One Identity OneLogin 安全漏洞
One Identity OneLogin is an identity and access management software from US-based One Identity. A security vulnerability exists in One Identity OneLogin versions prior to 2025.3.0, which stems from the GET Apps API v2 returning OIDC client keys, which could lead to the disclosure of sensitive...
CVE-2025-59363
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 even though this secret should only be returned when an App is first created,...
CVE-2025-59363
In One Identity OneLogin prior to 2025.3.0, the GET /api/2/apps endpoint returned OIDC client_secret values alongside app metadata, enabling disclosure of sensitive credentials. This is caused by excessive data being returned by the Apps API v2 and constitutes a breach of confidentiality for OIDC...
php-saml
This is a PHP SAML toolkit for adding SAML support to PHP software. It is a library provided and supported by OneLogin Inc. The library is compatible with PHP versions greater than 7.1. The library includes features such as: Support for SAML 2.0 Support for SAML 1.1 Support for SAML 1.0 Support f...
