PT-2026-2935

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.20.1 Description FreeRDP is a free implementation of the Remote Desktop Protocol. A heap out-of-bounds read occurs in the smartcard SetAttrib path when the cbAttrLen variable does not match the actual NDR buffer...

EUVD-2018-6663

Malware in sbrugna...

EUVD-2018-15965

Malware in sbrugna...

EUVD-2017-14973

Malware in sbrugna...

EUVD-2018-8237

Malware in sbrugna...

EUVD-2018-8263

Malware in sbrugna...

EUVD-2018-8265

Malware in sbrugna...

EUVD-2006-3890

Malware in sbrugna...

EUVD-2002-2015

Malware in sbrugna...

EUVD-2004-0700

Malware in sbrugna...

EUVD-2017-12671

Malware in sbrugna...

EUVD-2018-6664

Malware in sbrugna...

EUVD-2023-58902

Malicious code in bioql PyPI...

EUVD-2021-8870

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-6680

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16...

Linux Distros Unpatched Vulnerability : CVE-2018-16423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free when handling responses from a smartcard in scfilesetsecattr in libopensc/sc.c in OpenSC before 0.19.0-rc1 could be used by attackers able to supp...

FIDO2 Authentication Does Not Work With Webpages Opened Using Microsoft Edge

Users are not able to Authenticate to a website that requires FIDO2 Authentication using a Yubikey when using Edge on VDA Devices. The users are constantly prompted to select a Smartcard device. The same users are able to Authenticate onto the same website using Chrome or Firefox inside the same...

CVE-2023-6680

An improper certificate validation issue in Smartcard authentication in GitLab EE affecting all versions from 11.6 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows an attacker to authenticate as another user given their public key if they use Smartcard authentication...

CVE-2002-2036

Sun Ray Server Software SRSS 1.3, when Non-Smartcard Mobility NSCM is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client...

CWA smartcard logon error 'Can’t read smart card' on client with SIM card

There is a client with 2 smart cards . A physical smart card and an integrated eSIM . When CWA Windows tries to autenticate with smartcard the user gets an error that says "Can't read smart card. Please contact your IT administrator" . If we remove the SIM card from the client , the authenticatio...