Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the SCIM API when URL-encoded path values are used. An attacker can access sensitive user information, including names, email addresses, phone numbers, addresses, external IDs,...

CVE-2016-15006

A vulnerability, which was classified as problematic, has been found in enigmaX up to 2.2. This issue affects the function getSeed of the file main.c of the component Scrambling Table Handler. The manipulation leads to predictable seed in pseudo-random number generator prng. The attack may be...

MAL-2024-3281 Malicious code in updated-tricks-roblox-robux-generator-2023-de-2qqadet (npm)

--- -= Per source details. Do not edit below this line.=-...

GHSA-J28R-J54M-GPC4 Code Injection in SLO Generator

SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past https://github.com/google/slo-generator/pull/173...

CVE-2021-22557

CVE-2021-22557 affects Google’s SLO Generator. The issue arises from loading YAML files in the SLO Generator in a way that, with crafted formatting, can lead to code execution within the tool’s context. Public references and exploits (e.g., Exploit-DB entry for Google SLO-Generator 2.0.0) corrobo...