171 matches found
CVE-2025-46705
CVE-2025-46705 affects Entr'ouvert Lasso (notably 2.5.1 and 2.8.2). A malformed SAML assertion/response can trigger denial of service. Connected advisories (Debian, openSUSE/SUSE, Ubuntu) confirm multiple Lasso CVEs (including 46404, 46784, 47151) with fixes in various package versions (e.g., Deb...
CVE-2025-46705
A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...
PT-2025-45110
Name of the Vulnerable Software and Affected Versions Entr'ouvert Lasso versions 2.5.1 and 2.8.2 Description A type confusion issue exists within the lasso node impl init from xml function. A specially crafted SAML response can trigger this issue, potentially leading to arbitrary code execution. ...
PT-2025-45109
Name of the Vulnerable Software and Affected Versions Entr'ouvert Lasso version 2.5.1 Description A denial of service issue exists in the lasso node init from message with format functionality. A specially crafted SAML response can cause memory depletion, leading to a denial of service. An attack...
Entr'ouvert Lasso lasso_node_impl_init_from_xml type confusion vulnerability
Talos Vulnerability Report TALOS-2025-2193 Entr'ouvert Lasso lassonodeimplinitfromxml type confusion vulnerability November 5, 2025 CVE Number CVE-2025-47151 SUMMARY A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A special...
Linux Distros Unpatched Vulnerability : CVE-2025-46404
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can...
Linux Distros Unpatched Vulnerability : CVE-2025-46705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion respons...
EUVD-2020-0457
Malware in sbrugna...
EUVD-2019-4957
Malware in sbrugna...
EUVD-2018-13779
Malware in sbrugna...
EUVD-2018-13778
Malware in sbrugna...
EUVD-2019-8355
Malware in sbrugna...
EUVD-2019-3981
Malware in sbrugna...
EUVD-2013-0593
Malware in sbrugna...
EUVD-2023-1724
Malicious code in bioql PyPI...
EUVD-2023-1953
Malicious code in bioql PyPI...
EUVD-2025-7788
Malicious code in bioql PyPI...
EUVD-2023-25057
Malicious code in bioql PyPI...