220 matches found
CVE-2022-1162
CVE-2022-1162 GitLab CE/EE バージョン14.7（14.7.7より前）、14.8（14.8.5より前）、14.9（14.9.2より前）では、OmniAuthプロバイダー（例：OAuth、LDAP、SAML）を使用して登録されたアカウントにハードコードされたパスワードが設定されており、攻撃者がアカウントを乗っ取る可能性があります。 エクスプロイト: 影響を受ける最初のバージョン以降に作成された新しいGitLabアカウント（GitLabがパッチ適用済みバージョンより前の場合）は、次のパスワードでログインできます。 123qweQWE!@000000000 参考文献:...
GitLab CE/EE - Hard-Coded Credentials
GitLab CE/EE contains a hard-coded credentials vulnerability. A hardcoded password was set for accounts registered using an OmniAuth provider e.g. OAuth, LDAP, SAML, allowing attackers to potentially take over accounts. This template attempts to passively identify vulnerable versions of GitLab...
Malicious code in omniauth-recharge-rails-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...
MAL-2026-14526 Malicious code in omniauth-recharge-rails-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec72eac9d0bae686eddce65991c912a23c97621648e3316cd05188038d17d7 The package's package.json declares a preinstall lifecycle script that runs wget against a hardcoded webhook.site URL...
EUVD-2017-0228
Malware in sbrugna...
EUVD-2017-0216
Malware in sbrugna...
EUVD-2019-0585
Malware in sbrugna...
EUVD-2020-1445
Malware in sbrugna...
EUVD-2017-8873
Malware in sbrugna...
EUVD-2020-1480
Malware in sbrugna...
EUVD-2020-5574
Malware in sbrugna...
EUVD-2018-0158
Malware in sbrugna...
EUVD-2022-6596
Malicious code in bioql PyPI...
EUVD-2025-29406
Malicious code in bioql PyPI...
EUVD-2024-0260
Malicious code in bioql PyPI...
EUVD-2022-4629
Malicious code in bioql PyPI...
EUVD-2022-2099
Malicious code in bioql PyPI...
EUVD-2024-16978
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2018-8971
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Auth0 integration in GitLab before 10.3.9, 10.4.x before 10.4.6, and 10.5.x before 10.5.6 has an incorrect omniauth-auth0 configuration, leading to signing ...