EUVD-2011-3261

Malware in sbrugna...

EUVD-2019-9703

Malware in sbrugna...

EUVD-2019-10477

Malware in sbrugna...

EUVD-2011-0065

Malware in sbrugna...

EUVD-2022-32381

Malicious code in bioql PyPI...

EUVD-2025-21563

Malicious code in bioql PyPI...

EUVD-2025-24855

Malicious code in bioql PyPI...

EUVD-2025-31747

Malicious code in bioql PyPI...

EUVD-2025-11382

Malicious code in bioql PyPI...

CVE-2025-54477

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

CVE-2025-54477

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

CVE-2025-54477 Joomla! Core - [20250902] User-Enumeration in passkey authentication method

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

PT-2025-40004

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Improper handling of authentication requests results in a user enumeration vector within the passkey authentication method. This allows an attacker to potentially identify valid users. Recommendation...

php-saml

This is a PHP library for implementing SAML Security Assertion Markup Language authentication and authorization. It is a toolkit for adding SAML support to PHP software. The library is compatible with PHP 5.3.2 and later versions, and it uses the xmlseclibs library for XML encryption and...

CVE-2025-27845

In ESPEC North America Web Controller 3 before 3.3.4, /api/v4/auth/ with any invalid authentication request results in exposing a JWT secret. This allows for elevated permissions to the UI...

CVE-2025-49831

An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker’s control. CyberArk believes there to be very few installations where this...

CVE-2025-49831

An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker’s control. CyberArk believes there to be very few installations where this...

CVE-2025-49831 Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device

An attacker of Secrets Manager, Self-Hosted installations that route traffic from Secrets Manager to AWS through a misconfigured network device can reroute authentication requests to a malicious server under the attacker’s control. CyberArk believes there to be very few installations where this...

NTLM Hash Exposure

dnn.platform is vulnerable to NTLM hash exposure. The vulnerability is due to improper handling of authentication requests, allowing malicious interactions to redirect NTLM authentication hashes to an attacker-controlled SMB server...

CVE-2024-20481

A vulnerability in the Remote Access VPN RAVPN service of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of the RAVPN service. This vulnerability is due to resource...