131 matches found
SugarCRM php-saml Vulnerability
SugarCRM is prone to a signature validation vulnerability in php-saml. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Fedora 26 : php-onelogin-php-saml (2017-8e4c14eeec)
Update to 2.10.5 ---- Update to 2.10.4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...
OneLogin Extension for Chrome Installed
OneLogin, a password manager extension for the Chrome browser, is installed on the remote Windows host. Note that the OneLogin servers were compromised on May 31, 2017. It is strongly recommended that users change their OneLogin password and the passwords for all accounts that were stored in...
OneLogin Extension for Firefox Installed
OneLogin, a password manager extension for the Firefox browser, is installed on the remote Windows host. Note that the OneLogin servers were compromised on May 31, 2017. It is strongly recommended that users change their OneLogin password and the passwords for all accounts that were stored in...
On ShadowBrokers, WannaCry, Samba, and the OneLogin Breach
Mike Mimoso and Chris Brook discuss the news of the week, including the ShadowBrokers crowdfunding attempt, errors in WannaCry, a new Wikileaks dump, last week’s Samba vulnerability, and the OneLogin breach. Download: ThreatpostNewsWrapJune22017.mp3 Music by Chris Gonsalves...
Password manager “OneLogin” hacked; data stolen
By Waqas OneLogin, Inc., the developers of single sign-on and identity management for cloud-based applications has announced that its servers for the US region have been hacked and accessed by a third party. As a result; encrypted information related to its password management service OneLogin ha...
OneLogin: Breach Exposed Ability to Decrypt Data
OneLogin, an online service that lets users manage logins to sites and apps from a single platform, says it has suffered a security breach in which customer data was compromised, including the ability to decrypt encrypted data. Headquartered in San Francisco, OneLogin provides single sign-on and...
OneLogin Breach Compromised Customer Data, Ability to Decrypt Encrypted Data
A breach at OneLogin, a company that provides customers with a single sign on for logging into multiple sites and apps, appears to have compromised customer data, including the ability to decrypt encrypted data. The company notified customers via email Wednesday that the incident stemmed from...
OneLogin Password Manager Hacked; Users’ Data Can be Decrypted
Do you use OneLogin password manager? If yes, then immediately change all your account passwords right now. OneLogin, the cloud-based password management and identity management software company, has admitted that the company has suffered a data breach. The company announced on Thursday that it h...
Uber: SAML Authentication Bypass on uchat.uberinternal.com
Due to improper SAML verification it was possible to bypass the OneLogin authentication on https://uchat.uberinternal.com and gain unauthorized access to internal chats. We enjoyed working with @mishre on this report and look forward to receiving more submissions from them in the future!...
Fedora 25 : php-onelogin-php-saml (2017-06f4b88ceb)
Update to 2.10.5 ---- Update to 2.10.4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...
Fedora 24 : php-onelogin-php-saml (2017-68cdc567e9)
Update to 2.10.5 ---- Update to 2.10.4 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEV...
Fedora Update for php-onelogin-php-saml FEDORA-2017-06f4b88ceb
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for php-onelogin-php-saml FEDORA-2017-68cdc567e9
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 25 Update: php-onelogin-php-saml-2.10.5-1.fc25
OneLogin's SAML PHP toolkit let you build a SP Service Provider over your PHP application and connect it to any IdP Identity Provider. Autoloader: /usr/share/php/OneLogin/Saml2/autoload.php...
[SECURITY] Fedora 24 Update: php-onelogin-php-saml-2.10.5-1.fc24
OneLogin's SAML PHP toolkit let you build a SP Service Provider over your PHP application and connect it to any IdP Identity Provider. Autoloader: /usr/share/php/OneLogin/Saml2/autoload.php...
[SECURITY] Fedora 26 Update: php-onelogin-php-saml-2.10.5-1.fc26
OneLogin's SAML PHP toolkit let you build a SP Service Provider over your PHP application and connect it to any IdP Identity Provider. Autoloader: /usr/share/php/OneLogin/Saml2/autoload.php...
onelogin.com XSS vulnerability
Vulnerable URL: https://www.onelogin.com/jp/signup?plan=lol" Details: Description| Value ---|--- Patched:| Yes, at 05.02.2017 Latest check for patch:| 05.02.2017 12:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3617 VIP website status:| Yes Coordinated...
Yelp: Content spoofing on yelp.onelogin
Hi Yelp Team, I'm not sure if this one is out of scope but i want you guys to be aware of it, I have found that content spoofing is possible on yelp onelogin. Reference: https://www.owasp.org/index.php/ContentSpoofing PoC URL:...
