2828 matches found
CVE-2025-54603
The CVE-2025-54603 entry affects Claroty Secure Access versions 3.3.0 through 4.0.2. The root cause is an incorrect OIDC authentication flow, which can enable unauthorized user creation or impersonation of existing OIDC users. The vulnerability is described with network attack surface and a low t...
PT-2025-42006
Name of the Vulnerable Software and Affected Versions Claroty Secure Access versions 3.3.0 through 4.0.2 Description An incorrect OpenID Connect OIDC authentication flow can lead to unauthorized user creation or impersonation of existing OIDC users. Recommendations Update Claroty Secure Access to...
CVE-2025-54603
An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users...
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in the oidc/saml login flows. An attacker can access sensitive information by sending crafted requests to the exposed interface. Remediation Upgrade...
CVE-2025-61920
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implementation accepts unbounded JWS/JWT header and signature segments. A remote attacker can craft a token whose base64url‑encoded header or signature spans hundreds of megabytes...
EUVD-2025-33768
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implementation accepts unbounded JWS/JWT header and signature segments. A remote attacker can craft a token whose base64url‑encoded header or signature spans hundreds of megabytes...
CVE-2025-61920
CVE-2025-61920 — Authlib (Python) Authlib’s JOSE implementation (prior to v1.6.5) accepts unbounded JWS/JWT header and signature segments. A remote attacker can craft a token whose base64url header or signature spans hundreds of megabytes. During verification, the library decodes and parses the f...
CVE-2025-11338
A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploi...
EUVD-2021-25579
Malware in sbrugna...
EUVD-2015-2882
Malware in sbrugna...
EUVD-2007-1646
Malware in sbrugna...
EUVD-2019-13762
Malware in sbrugna...
EUVD-2009-5038
Malware in sbrugna...
EUVD-2017-0174
Malware in sbrugna...
EUVD-2019-5614
Malware in sbrugna...
EUVD-2019-6842
Malware in sbrugna...
EUVD-2010-3669
Malware in sbrugna...
EUVD-2019-0393
Malware in sbrugna...