Lucene search
+L

746 matches found

OSV
OSV
•added 2021/12/20 5:52 p.m.•36 views

GHSA-2X32-JM95-2CPX Authentication Bypass in dex

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

9.8CVSS6.7AI score0.01718EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/12/20 5:52 p.m.•72 views

Authentication Bypass in dex

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

9.8CVSS8.8AI score0.01718EPSS
SaveExploits0References5Affected Software1
Code423n4
Code423n4
•added 2021/12/01 12:00 a.m.•23 views

splitReinvest() can be front run

Handle WatchPug Vulnerability details function splitReinvestuint256 rewardLiquidity external retrieveRewardrewardLiquidity; uint256 rewardBalance = rewardToken.balanceOfaddressthis; rewardToken.safeTransferaddressdexHandler, rewardBalance.div2; dexHandler.buyMalt; bondAccountmsg.sender; emit...

7AI score
SaveExploits0
Kitploit
Kitploit
•added 2021/07/04 12:30 p.m.•74 views

FRIDA-DEXDump - Fast Search And Dump Dex On Memory

Features 1. support fuzzy search broken header dex. 2. fix struct data of dex-header. 3. compatible with all android versionfrida supported. 4. support loading as objection plugin 5. pypi package has been released Requires frida: pip install frida optional click pip install click Installation Fro...

7.4AI score
SaveExploits0References2
NVD
NVD
•added 2021/06/11 3:15 p.m.•25 views

CVE-2021-25392

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path...

5.5CVSS0.00102EPSS
SaveExploits1References2
OSV
OSV
•added 2021/06/11 3:15 p.m.•14 views

CVE-2021-25392

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path...

5.5CVSS6.3AI score0.00102EPSS
SaveExploits1References2
Prion
Prion
•added 2021/06/11 3:15 p.m.•28 views

Path traversal

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path...

2.1CVSS5.3AI score0.00102EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/06/11 3:15 p.m.•8 views

CVE-2021-25392

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path...

5.5CVSS5.9AI score0.00102EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/06/11 2:45 p.m.•34 views

CVE-2021-25392

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path...

4CVSS5.5AI score0.00102EPSS
SaveExploits1References2
CVE
CVE
•added 2021/06/11 2:45 p.m.•52 views

CVE-2021-25392

CVE-2021-25392 concerns Samsung DeX backup path configuration. The Red Hat/NVD/CVE entries describe an improper protection of the backup path, enabling a local attacker to access sensitive information by changing the path. Affected component is the Dex-related backup path handling; the root cause...

5.5CVSS5.9AI score0.00102EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/11 12:00 a.m.•4 views

CVE-2021-25392: Exposure of Sensitive Information to an Unauthorized Actor

Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path...

5.5CVSS5.8AI score0.00102EPSS
SaveExploits1References3
OSV
OSV
•added 2021/06/01 12:00 a.m.•36 views

ASB-A-178055795

In Dex2oat of dex2oat.cc, there is a possible way to inject bytecode into an app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00217EPSS
SaveExploits0References4
NVD
NVD
•added 2021/05/28 11:15 a.m.•29 views

CVE-2020-27847

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

9.8CVSS0.01718EPSS
SaveExploits0References3
OSV
OSV
•added 2021/05/28 11:15 a.m.•30 views

CVE-2020-27847

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

9.8CVSS9.2AI score0.00989EPSS
SaveExploits0References3
Prion
Prion
•added 2021/05/28 11:15 a.m.•25 views

Design/Logic Flaw

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

7.5CVSS9.2AI score0.01718EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2021/05/28 10:20 a.m.•50 views

CVE-2020-27847

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

9.3AI score0.01718EPSS
SaveExploits0References3
CVE
CVE
•added 2021/05/28 10:20 a.m.•94 views

CVE-2020-27847

The CVE-2020-27847 issue is in the SAML connector of github.com/dexidp/dex, affecting Dex versions prior to 2.27.0 and enabling bypass of SAML authentication due to a flaw in Signature Validation. It impacts confidentiality, integrity, and availability. The cited mitigation is to upgrade to Dex v...

9.8CVSS9.1AI score0.01718EPSS
SaveExploits0References3Affected Software1
AlpineLinux
AlpineLinux
•added 2021/05/28 10:20 a.m.•17 views

CVE-2020-27847

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

9.8CVSS9.2AI score0.01718EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/28 12:00 a.m.•3 views

CVE-2020-27847: Improper Handling of Syntactically Invalid Structure

A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. Thi...

9.8CVSS5.9AI score0.01718EPSS
SaveExploits0References2
Hacker One
Hacker One
•added 2021/04/12 6:58 p.m.•87 views

GitHub Security Lab: porcupiney.hairs : Java/Android - Insecure Loading of a Dex File

This bug was reported directly to GitHub Security Lab...

1.1AI score
SaveExploits0
Rows per page
Query Builder