13 matches found
CVE-2021-21239
CVE-2021-21239 これは、xmlsecの脆弱性CVE-2021-21239を悪用するPoCスクリプトです。 このスクリプトを使用するには、Dockerイメージをビルドするか、自分でRSA鍵を用意し、xmlsecがインストールされていることを前提に実行してください。 脆弱性情報: https://www.aleksey.com/pipermail/xmlsec/2013/009717.html...
CVE-2021-21239-Exploit
세부 보고서는 아래에 있습니다 https://docs.google.com/document/d/157fGn7lLP1uBuRz8zUgRDWTDklKznljeOWwRQ-C6uFg/edit?usp=sharing 사용법 python main.py...
redash-vulnerable
redash-vulnerable 🐛 一个通过 Docker 容器化的 Redash 实例，存在 CVE-2021-21239 漏洞，该漏洞由 Calif 撰写介绍。 使用 💻 启动服务器（保留数据） root@kitploit: script/server 这将使用 Docker Compose 以分离模式启动 Redash 服务器，保留所有现有数据。服务器将在 http://localhost:8080 上可用。 重新开始（销毁所有数据） root@kitploit: script/server --destroy...
Exploit for Improper Verification of Cryptographic Signature in Pysaml2_Project Pysaml2
CVE-2021-21239 This is a poc script to explot the xmlsec vu...
SUSE CVE-2021-21239
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. Users of pysaml2 that use the default CryptoBackendXmlSec1 backend and need to verify signed SAML documents are impacted. PySAML2 does no...
Ubuntu: Security Advisory (USN-5066-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 ESM : PySAML2 vulnerability (USN-5066-2)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5066-2 advisory. USN-5066-1 fixed a vulnerability in PySAML2. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding description...
Ubuntu: Security Advisory (USN-5066-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 18.04 LTS / 20.04 LTS : PySAML2 vulnerability (USN-5066-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5066-1 advisory. Brian Wolff discovered that PySAML2 incorrectly validated cryptographic signatures. A remote attacker could possibly use this issue to alter SAML...
Debian DLA-2577-1 : python-pysaml2 security update
Several issues have been found in python-pysaml2, a pure python implementation of SAML Version 2 Standard. CVE-2017-1000433 pysaml2 accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password. CVE-2021-21239 pysaml2 ha...
Debian: Security Advisory (DLA-2577-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-21239
CVE-2021-21239 affects PySAML2 (pre-6.5.0) and stems from improper verification of SAML signatures when using the default CryptoBackendXmlSec1 backend. The underlying xmlsec1 verification can accept arbitrary keys embedded in the document instead of restricting to trusted IdP certificates, enabli...
