198 matches found
CVE-2021-21239
CVE-2021-21239技术报告：Redash SAML认证漏洞 SAML简介 安全断言标记语言（SAML）是一种开放标准，用于在联合身份系统中的各方之间交换身份验证和授权数据。它支持跨域的单点登录（SSO）。关键组件包括： 身份提供者（IdP） ：对用户进行身份验证并发布SAML断言的服务（例如，Google的SAML IdP）。它使用其私钥对断言进行签名以确保完整性和真实性。 服务提供者（SP） ：依赖IdP进行身份验证的应用程序（例如，Redash）。SP使用IdP的公钥或证书验证签名以信任断言。...
Astra Linux – Vulnerability in python-pysaml2
PySAML2 is a pure Python implementation of the SAML Version 2 Standard. Before version 6.5.0, PySAML2 had a flaw in the verification of cryptographic signatures. This issue affects users of pysaml2 who use the default CryptoBackendXmlSec1 backend and need to verify signed SAML documents. PySAML2...
OPENSUSE-SU-2026:11524-1 python313-pysaml2-7.5.4-1.1 on GA media
These are all security issues fixed in the python313-pysaml2-7.5.4-1.1 package on the GA media of openSUSE Tumbleweed...
Exploit for Improper Verification of Cryptographic Signature in Pysaml2_Project Pysaml2
CVE-2021-21239 This is a poc script to explot the xmlsec vu...
EUVD-2017-0104
Malware in sbrugna...
EUVD-2020-0157
Malware in sbrugna...
EUVD-2017-0106
Malware in sbrugna...
EUVD-2021-0211
Malware in sbrugna...
EUVD-2018-0126
Malware in sbrugna...
EUVD-2017-0105
Malware in sbrugna...
EUVD-2021-0210
Malware in sbrugna...
Exploit for Improper Verification of Cryptographic Signature in Pysaml2_Project Pysaml2
Technical Report on CVE-2021-21239: Redash SAML Authentication...
Linux Distros Unpatched Vulnerability : CVE-2021-21238
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability...
Linux Distros Unpatched Vulnerability : CVE-2017-1000246
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data...
Linux Distros Unpatched Vulnerability : CVE-2016-10127
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response. CVE-2016-10127 Note that Nessus relies on...
RHEL 7 : python-defusedxml and python-pysaml2 (RHSA-2017:0937)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:0937 advisory. The defusedxml package contains several Python-only updates for security vulnerabilities in Python's XML libraries. Defusedxml functions and classes...
RHEL 7 : python-defusedxml and python-pysaml2 (RHSA-2017:0936)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:0936 advisory. The defusedxml package contains several Python-only updates for security vulnerabilities in Python's XML libraries. Defusedxml functions and classes...
RHSA-2017:0938 Red Hat Security Advisory: python-defusedxml and python-pysaml2 security update
Bulletin has no description...