5226 matches found
CVE-2025-49264 WordPress Cloud SAML SSO - Single Sign On Login <= 1.0.18 - Local File Inclusion Vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Cloud Infrastructure Services Cloud SAML SSO - Single Sign On Login cloud-sso-single-sign-on allows PHP Local File Inclusion.This issue affects Cloud SAML SSO - Single Sign On...
CVE-2025-49264: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Cloud Infrastructure Services Cloud SAML SSO - Single Sign On Login cloud-sso-single-sign-on allows PHP Local File Inclusion.This issue affects Cloud SAML SSO - Single Sign On...
WordPress plugin Cloud SAML SSO - Single Sign On Login Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
PT-2025-33297
Name of the Vulnerable Software and Affected Versions: Mendix SAML Mendix 10.12 compatible versions prior to 4.0.3 Mendix SAML Mendix 10.21 compatible versions prior to 4.1.2 Mendix SAML Mendix 9.24 compatible versions prior to 3.6.21 Description: The Mendix SAML module insufficiently enforces...
Siemens Mendix SAML 数据伪造问题漏洞
Siemens Mendix SAML is an authentication module provided by the Siemens Mendix platform for single sign-on SSO functionality. An account hijacking vulnerability exists in Siemens Mendix SAML, which stems from insufficient signature verification and binding checks, and can be exploited by an...
Siemens Mendix SAML Module
SUMMARY Mendix SAML module contains a vulnerability that could allow unauthenticated remote attackers to hijack an account in specific SSO configurations. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a...
Cross-Site Request Forgery
Cross-Site Request Forgery CSRF is a confused deputy attack where the attacker causes the browser to send a request to a target using the ambient authority of the user’s cookies or network position.1 For example, attacker.example can serve the following HTML to a victim and the browser will send ...
August 12, 2025—KB5063878 (OS Build 26100.4946) for Windows
None None...
CVE-2025-8775 Qiyuesuo Eelectronic Signature Platform Scheduled Task upload execute unrestricted upload
A vulnerability was found in Qiyuesuo Eelectronic Signature Platform up to 4.34 and classified as critical. Affected by this issue is the function execute of the file /api/code/upload of the component Scheduled Task Handler. The manipulation of the argument File leads to unrestricted upload. The...
Linux Distros Unpatched Vulnerability : CVE-2017-16995
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The checkaluop function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service memory corruption or possibly...
Single Sign-On macOS Unauthorized Access
The vulnerability of the Single Sign-On component in macOS operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential data...
RHSA-2021:2065 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.7 security update on RHEL 8
Bulletin has no description...
RHSA-2021:2064 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.7 security update on RHEL 7
Bulletin has no description...
RHSA-2021:2063 Red Hat Security Advisory: Red Hat Single Sign-On 7.4.7 security update on RHEL 6
Bulletin has no description...
Hard-Earned Lessons in Access Control at Scale: Enforcing Identity and Policy across Trust Boundaries with Reverse Proxies and MTLS
In today's enterprise environment, traditional access methods such as Virtual Private Networks VPNs and application-specific Single Sign-On SSO often fall short when it comes to securely scaling access for a distributed and dynamic workforce. This paper presents our experience implementing a...
Proactive Disentangled Modeling of Trigger-Object Pairings for Backdoor Defense
Deep neural networks DNNs and generative AI GenAI are increasingly vulnerable to backdoor attacks, where adversaries embed triggers into inputs to cause models to misclassify or misinterpret target labels. Beyond traditional single-trigger scenarios, attackers may inject multiple triggers across...
Moderate: Red Hat Security Advisory: Red Hat build of Keycloak 26.0.13 Update
New Red Hat build of Keycloak 26.0.13 packages are available from the Customer Portal Red Hat build of Keycloak 26.0.13 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Security...
Enhancing IoT Intrusion Detection Systems through Adversarial Training
The augmentation of Internet of Things IoT devices transformed both automation and connectivity but revealed major security vulnerabilities in networks. We address these challenges by designing a robust intrusion detection system IDS to detect complex attacks by learning patterns from the...