152 matches found
CVE-2023-20178
CVE-2023-20178 This is PoC for Arbitrary File Delete vulnerability in Cisco Secure Client tested on 5.0.01242 and Cisco AnyConnect tested on 4.10.06079. When a user connect to vpn, vpndownloader.exe process is started in background and it will create directory in c:\windows\temp with default...
tu-TOCTOU-kaiu-TOCMEU-CVE-2020-13162-
Pulse Secure Windows Client https://www.redtimmy.com/privilege-escalation/pulse-secure-windows-client/ and https://www.redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162/...
CVE-2026-18211
CVE-2026-18211 affects Keycloak core services, specifically the secure-client-uris policy executor. Affected component enforces security requirements on client configurations (e.g., redirect URIs) but contains an improper check that only inspects the start of a URL rather than validating the host...
CVE-2026-18211
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...
CVE-2026-18211 Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...
CVE-2026-18211 Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...
Improperly Implemented Security Check for Standard
Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard through the secure-client-uris client policy executor in t...
EUVD-2006-0969
Malware in sbrugna...
EUVD-2018-19297
Malware in sbrugna...
EUVD-2020-5435
Malware in sbrugna...
EUVD-2023-38379
Malicious code in bioql PyPI...
EUVD-2024-18106
Malicious code in bioql PyPI...
EUVD-2024-45518
Malicious code in bioql PyPI...
EUVD-2024-18189
Malicious code in bioql PyPI...
EUVD-2023-24420
Malicious code in bioql PyPI...
EUVD-2023-24419
Malicious code in bioql PyPI...
EUVD-2024-18053
Malicious code in bioql PyPI...
EUVD-2024-18052
Malicious code in bioql PyPI...
The vulnerability of the Secure Firewall Posture Engine module of the Cisco Secure Client (formerly Cisco AnyConnect Secure Mobility Client) security solution allows a hacker to execute arbitrary code.
The vulnerability of the Secure Firewall Posture Engine module of the Cisco Secure Client formerly Cisco AnyConnect Secure Mobility Client is related to errors in checking the cryptographic signature. Exploiting this vulnerability can allow a attacker to execute arbitrary code...
CVE-2024-20391
A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...