PYSEC-2015-42

providers/saml2/admin.py in the Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider SP...

Code injection

providers/saml2/admin.py in the Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider SP...

PYSEC-2015-41

providers/saml2/admin.py in the Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider SP owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name...

PYSEC-2015-41

providers/saml2/admin.py in the Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider SP owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name...

CVE-2015-5217

providers/saml2/admin.py in the Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider SP owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name...

CVE-2015-5301: Undefined Security Weakness

providers/saml2/admin.py in the Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider SP...

Singapore telecommunications extensive use of the ZHONE Router with the hijacking of risk-vulnerability warning-the black bar safety net

By Singapore of a Telecom operator authorized to use and is made all over the world“first-class enterprise”operation used by thousands of router device there is a 0day vulnerability, and this vulnerability can give way by the controller is completely hijacked, the vast majority of users had no...

Cloud Connect Jobs might start failing after upgrading to v8 update#3

Challenge After installation of update 3 for v8, tenants might report that their Cloud Connect jobs fail with "Failed to connect to the Veeam Cloud Connect service" error message, while tenant's job log includes "No such host is known" error message. Cause Tenant has a service provider added to h...

AVG Antivirus Plans to Collect & Sell Your Personal Data to Advertisers

We at The Hacker News are big fans of Security Software – The first thing we install while setting our Computers and Devices. Thanks to Free Security Software that protects Internet users without paying for their security. But, Remember: Nothing comes for FREE "Free" is just a relative term, as o...

Unspecified Vulnerability in Red Hat PicketLink Service Provider and Identity Provider

Red Hat PicketLink is the United States Red Hat Red Hat company's set of unified identity management framework for Java applications. A security vulnerability exists in the Service Provider SP and Identity Provider IdP in Red Hat PicketLink versions prior to 2.7.0, which stems from the program's...

CVE-2015-6254

The 1 Service Provider SP and 2 Identity Provider IdP in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location from which the message was received, which allows remote attackers to have unspecified impact via unknown...

Design/Logic Flaw

The Service Provider SP in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion. NOTE: this identifier has been SPLIT per ADT2 due ...

Code injection

The 1 Service Provider SP and 2 Identity Provider IdP in PicketLink before 2.7.0 does not ensure that the Destination attribute in a Response element in a SAML assertion matches the location from which the message was received, which allows remote attackers to have unspecified impact via unknown...

CVE-2015-0277

The Service Provider SP in PicketLink before 2.7.0 does not ensure that it is a member of an Audience element when an AudienceRestriction is specified, which allows remote attackers to log in to other users' accounts via a crafted SAML assertion. NOTE: this identifier has been SPLIT per ADT2 due ...

CVE-2015-6254

The CVE-2015-6254 entry involves PicketLink (SP/IdP) prior to version 2.7.0 where the Destination attribute in a SAML Response is not validated against the message origin, enabling remote attackers to leverage unspecified vectors. Publicly documented references (NVD/NVD-derived CNVD) confirm the ...

Shibboleth OpenSAML-C and Shibboleth Service Provider XMLTooling-C Numeric Error Vulnerabilities

Shibboleth OpenSAML-C and Shibboleth Service Provider SP are both products of Shibboleth, a British company. OpenSAML-C is an open source library for implementing SAML Security Assertion Markup Language written in C. Shibboleth is an open source web single sign-on system based on the SAML protoco...

DEBIAN-CVE-2015-0851

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider SP, does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service crash via schema-invalid XML data...

CVE-2015-0851

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider SP, does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service crash via schema-invalid XML data...

CVE-2015-0851

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider SP, does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service crash via schema-invalid XML data...

CVE-2015-0851

XMLTooling-C before 1.5.5, as used in OpenSAML-C and Shibboleth Service Provider SP, does not properly handle integer conversion exceptions, which allows remote attackers to cause a denial of service crash via schema-invalid XML data...