216 matches found
CVE-2026-20102
A vulnerability in the SAML 2.0 single sign-on SSO feature of Cisco Secure Firewall ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the SAML feature and access sensitive,...
CVE-2026-27982
CVE-2026-27982 is an open redirect vulnerability in django-allauth prior to 65.14.1 when SAML IdP initiated SSO is enabled (disabled by default). An attacker could abuse a crafted URL to redirect users to an arbitrary external site. Affected product: django-allauth; affected component: SAML IdP i...
CVE-2026-27982
An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled it is disabled by default, which may allow an attacker to redirect users to an arbitrary external website via a crafted URL...
DRUPAL-CONTRIB-2026-018
This module enables you to perform SAML protocol-based single sign-on SSO on a Drupal site. The module doesn't sufficiently sanitize user input, leading to a reflected Cross-site scripting XSS vulnerability...
CVE-2026-27197
Sentry is a developer-first error tracking and performance monitoring tool. Versions 21.12.0 through 26.1.0 have a critical vulnerability in its SAML SSO implementation which allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on t...
CVE-2026-27197 Sentry: Improper Authentication on SAML SSO process allows user identity linking
Sentry is a developer-first error tracking and performance monitoring tool. Versions 21.12.0 through 26.1.0 have a critical vulnerability in its SAML SSO implementation which allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on t...
CVE-2026-27197
Sentry is a developer-first error tracking and performance monitoring tool. Versions 21.12.0 through 26.1.0 have a critical vulnerability in its SAML SSO implementation which allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on t...
CVE-2022-23610
wire-server provides back end services for Wire, an open source messenger. In versions of wire-server prior to the 2022-01-27 release, it was possible to craft DSA Signatures to bypass SAML SSO and impersonate any Wire user with SAML credentials. In teams with SAML, but without SCIM, it was...
EUVD-2021-24322
Malware in sbrugna...
EUVD-2015-6609
Malware in sbrugna...
EUVD-2016-1922
Malware in sbrugna...
EUVD-2020-27331
Malware in sbrugna...
EUVD-2022-28579
Malicious code in bioql PyPI...
EUVD-2023-24151
Malicious code in bioql PyPI...
EUVD-2023-1638
Malicious code in bioql PyPI...
EUVD-2024-36047
Malicious code in bioql PyPI...
EUVD-2022-51837
Malicious code in bioql PyPI...
EUVD-2025-0092
Malicious code in bioql PyPI...