CVE-2021-29156

CVE-2021-29156 إثبات المفهوم c 2021 GuidePoint Security Charlton Trezevant [email protected] الخلفية يسر GuidePoint اليوم أن تطلق إطلاق أداة إثبات مفهوم وظيفية لـ CVE-2021-29156، وهي ثغرة حقن LDAP في ForgeRock OpenAM v13.0.0. تسمح هذه الثغرة للمهاجم باستخراج مجموعة متنوعة من المعلومات مثل...

LDAP Injection In OpenAM

OpenAM contains an LDAP injection vulnerability. When a user tries to reset his password, they are asked to enter username, and then the backend validates whether the user exists or not through an LDAP query. If the user exists, the password reset token is sent to the user's email. Enumeration ca...

CVE-2026-33439

🐞 CVE-2026-33439: تنفيذ التعليمات البرمجية عن بُعد قبل المصادقة في OpenAM عبر إلغاء تسلسل jato.clientSession رؤية بشرية + تحليل بمساعدة الذكاء الاصطناعي + هندسة عكسية + استشارة ← استغلال أول تنفيذ استغلال مُشارك علنًا لـ CVE-2026-33439 ثغرة إلغاء تسلسل Java غير مصادق عليها في ForgeRock OpenAM تسم...

ForgeRock OpenAM <7.0 - Remote Code Execution

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/ request to the server. The vulnerabilit...

CVE-2025-20628 Insufficient granularity of access control for Remote Connector Servers in client mode

An insufficient granularity of access control vulnerability exists in PingIDM formerly ForgeRock Identity Management where administrators cannot properly configure access rules for Remote Connector Servers RCS running in client mode. This means attackers can spoof a client-mode RCS if one exists ...

EUVD-2016-7422

Malware in sbrugna...

EUVD-2017-5897

Malware in sbrugna...

EUVD-2017-5898

Malware in sbrugna...

EUVD-2020-9417

Malware in sbrugna...

EUVD-2021-23727

Malware in sbrugna...

EUVD-2018-19007

Malware in sbrugna...

EUVD-2021-23728

Malware in sbrugna...

EUVD-2023-12622

Malicious code in bioql PyPI...

EUVD-2023-12557

Malicious code in bioql PyPI...

EUVD-2023-12400

Malicious code in bioql PyPI...

EUVD-2023-23885

Malicious code in bioql PyPI...

EUVD-2021-34059

Malicious code in bioql PyPI...

EUVD-2022-43104

Malicious code in bioql PyPI...

CVE-2021-37154

In ForgeRock Access Management AM before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion...

CVE-2021-37153

ForgeRock Access Management AM before 7.0.2, when configured with Active Directory as the Identity Store, has an authentication-bypass issue...