vcenter_saml_login

Strumento di Accesso SAML per vCenter Uno strumento per estrarre il certificato dell'Identity Provider IdP dai backup di vCenter e accedere come Administrator Contesto Comunemente, durante gli engagement, otteniamo accesso ai backup di vCenter su un file server o accesso root all'host VCSA tramit...

CVE-2026-40070 bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths)

BSV Ruby SDK is the Ruby SDK for the BSV blockchain. From 0.3.1 to before 0.8.2, BSV::Wallet::WalletClientacquirecertificate persists certificate records to storage without verifying the certifier's signature over the certificate contents. In acquisitionprotocol: 'direct', the caller supplies all...

bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths)

Unverified certifier signatures persisted by acquirecertificate Affected packages Both bsv-sdk and bsv-wallet are published from the sgbett/bsv-ruby-sdk repository. The vulnerable code lives in lib/bsv/walletinterface/walletclient.rb, which is physically shipped inside both gems the...

EUVD-2019-5605

Malware in sbrugna...

CVE-2019-14399

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

CVE-2024-54848

Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute a man-in-the-middle attacks...

CVE-2024-54848

Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute a man-in-the-middle attacks...

PT-2025-3078 · Cp Plus · Cp Plus Cp-Vnr-3104

Name of the Vulnerable Software and Affected Versions: CP Plus CP-VNR-3104 B3223P22C02424 Description: The improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communications or execute man-in-the-middle attacks. Recommendations: For CP Pl...

CVE-2019-14399

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

Design/Logic Flaw

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

CVE-2019-14399: Undefined Security Weakness

The SSL certificate-storage feature in cPanel before 78.0.18 allows unsafe file operations in the context of the root account SEC-477...

PT-2019-13668

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 78.0.18 Description The issue concerns the SSL certificate-storage feature, which allows unsafe file operations in the context of the root account. Recommendations For versions prior to 78.0.18, update to version 78.0....

Modern OSs for embedded systems

At Kaspersky Lab we analyze the technologies available on cybersecurity market and this time we decided to look at what OS developers are offering for embedded systems or, in other words, the internet of things. Our primary interest is how and to what degree these OSs can solve...

Microsoft Office Information Disclosure

The vulnerability of the Microsoft Office application framework in Visual Basic relates to the export of a secret key from the certificate storage during document saving operations. Exploiting this vulnerability could allow an attacker, operating remotely, to obtain confidential information using...

Cisco TelePresence IX5000 Certificate Store Sensitive Information Disclosure Vulnerability

Cisco TelePresence is a telepresence conferencing solution developed by Cisco. A security vulnerability in the Cisco TelePresence IX5000 WEB management interface incorrectly storing certificates allows a remote user to exploit an access control issue in the WEB management interface to obtain X.50...