617 matches found
EUVD-2005-4868
Malware in sbrugna...
EUVD-2020-22887
Malware in sbrugna...
EUVD-2005-4867
Malware in sbrugna...
EUVD-2009-0500
Malware in sbrugna...
EUVD-2022-2562
Malicious code in bioql PyPI...
EUVD-2022-1879
Malicious code in bioql PyPI...
EUVD-2022-5104
Malicious code in bioql PyPI...
EUVD-2022-4408
Malicious code in bioql PyPI...
EUVD-2022-4285
Malicious code in bioql PyPI...
EUVD-2022-5663
Malicious code in bioql PyPI...
EUVD-2022-4044
Malicious code in bioql PyPI...
EUVD-2025-29235
Malicious code in bioql PyPI...
EUVD-2022-4508
Malicious code in bioql PyPI...
EUVD-2022-5270
Malicious code in bioql PyPI...
EUVD-2022-5691
Malicious code in bioql PyPI...
CVE-2025-59154
Openfire is an XMPP server licensed under the Open Source Apache License. Openfire’s SASL EXTERNAL mechanism for client TLS authentication contains a vulnerability in how it extracts user identities from X.509 certificates. Instead of parsing the structured ASN.1 data, the code calls...
Openfire < 5.0.2 / 5.1.0 Identity Spoofing
The remote host is running a version of Openfire that is affected by an identity spoofing vulnerability. Openfireâs SASL EXTERNAL mechanism for client TLS authentication contains a vulnerability in how it extracts user identities from X.509 certificates. Instead of parsing the structured ASN.1...
GHSA-W252-645G-87MP Openfire has potential identity spoofing issue via unsafe CN parsing
Summary Identity spoofing in X.509 client certificate authentication in Openfire allows internal attackers to impersonate other users via crafted certificate subject attributes, due to regex-based extraction of CN from an unescaped, provider-dependent DN string. Analysis Openfire’s SASL EXTERNAL...
CVE-2025-59154
Openfire is an XMPP server licensed under the Open Source Apache License. Openfire’s SASL EXTERNAL mechanism for client TLS authentication contains a vulnerability in how it extracts user identities from X.509 certificates. Instead of parsing the structured ASN.1 data, the code calls...
CVE-2025-59154 Openfire allows potential identity spoofing via unsafe CN parsing
Openfire is an XMPP server licensed under the Open Source Apache License. Openfire’s SASL EXTERNAL mechanism for client TLS authentication contains a vulnerability in how it extracts user identities from X.509 certificates. Instead of parsing the structured ASN.1 data, the code calls...