72 matches found
CVE-2026-49376
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin...
CVE-2026-49376
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin...
JetBrains TeamCity 输入验证错误漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools developed by the Czech company JetBrains. This tool offers features such as continuous unit testing, code quality analysis, and reporting on build issues. Prior to JetBrains TeamCity 2026.1, there was a...
PT-2026-44960
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1 Description An open redirect exists within the SAML plugin. An open redirect occurs when an application takes a user-supplied URL and redirects the user to it without sufficient validation, potential...
JetBrains TeamCity 安全漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools developed by the Czech company JetBrains. This tool offers features such as continuous unit testing, code quality analysis, and reporting on build issues. Versions of JetBrains TeamCity prior to 2026.1...
CVE-2026-49376: Incorrect Authorization
In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin...
CVE-2026-49380: URL Redirection to Untrusted Site
In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible...
CVE-2025-64131
Jenkins SAML Plugin 4.583.vc68232f7018a and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkins as that user...
Replay Attack
Overview Affected versions of this package are vulnerable to Replay Attack due to a lack of replay cache in the authentication process. An attacker can gain unauthorized access by replaying authentication requests between a user's web browser and the application, authenticating to Jenkins as that...
CVE-2025-64131
Jenkins SAML Plugin 4.583.vc68232f7018a and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkins as that user...
Jenkins SAML Plugin 安全漏洞
Jenkins SAML Plugin is an open source single sign-on plugin for Jenkins. A security vulnerability exists in Jenkins SAML Plugin 4.583.vc68232f7018a and prior versions, which stems from an unimplemented replay cache, which could allow an attacker to authenticate by replaying SAML authentication...
CVE-2025-64131: Authentication Bypass by Capture-replay
Jenkins SAML Plugin 4.583.vc68232f7018a and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkins as that user...
PT-2025-45734
Jenkins SAML Plugin 4.583.vc68232f7018a and earlier does not implement a replay cache. This allows attackers able to obtain information about the SAML authentication flow between a user’s web browser and Jenkins to replay those requests, authenticating to Jenkins as that user. SAML Plugin...
EUVD-2012-2344
Malware in sbrugna...
EUVD-2022-2416
Malicious code in bioql PyPI...
EUVD-2023-2106
Malicious code in bioql PyPI...
EUVD-2023-1515
Malicious code in bioql PyPI...
EUVD-2022-5102
Malicious code in bioql PyPI...
CVE-2025-7045
The Cloud SAML SSO plugin for WordPress is vulnerable to Identity Provider Deletion due to a missing capability check on the deleteconfig action of the cssohandleactions function in all versions up to, and including, 1.0.19. This makes it possible for unauthenticated attackers to delete any...