2869 matches found
CVE-2025-54603
An incorrect OpenID Connect (OIDC) authentication flow in Claroty Secure Access versions 3.3.0 through 4.0.2 can allow an unauthenticated, remote attacker to create unauthorized users or impersonate existing OIDC users. The flaw carries a CVSS 9.0 (CRITICAL) rating (network vector, high complexit...
PT-2025-42006
Name of the Vulnerable Software and Affected Versions Claroty Secure Access versions 3.3.0 through 4.0.2 Description An incorrect OpenID Connect OIDC authentication flow can lead to unauthorized user creation or impersonation of existing OIDC users. Recommendations Update Claroty Secure Access to...
CVE-2025-54603
An incorrect OIDC authentication flow in Claroty Secure Access 3.3.0 through 4.0.2 can result in unauthorized user creation or impersonation of existing OIDC users...
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in the oidc/saml login flows. An attacker can access sensitive information by sending crafted requests to the exposed interface. Remediation Upgrade...
CVE-2025-61920
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implementation accepts unbounded JWS/JWT header and signature segments. A remote attacker can craft a token whose base64url‑encoded header or signature spans hundreds of megabytes...
CVE-2025-61920
CVE-2025-61920 — Authlib (Python) Authlib’s JOSE implementation (prior to v1.6.5) accepts unbounded JWS/JWT header and signature segments. A remote attacker can craft a token whose base64url header or signature spans hundreds of megabytes. During verification, the library decodes and parses the f...
EUVD-2025-33768
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.5, Authlib’s JOSE implementation accepts unbounded JWS/JWT header and signature segments. A remote attacker can craft a token whose base64url‑encoded header or signature spans hundreds of megabytes...
CVE-2025-11338
A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploi...
EUVD-2017-0174
Malware in sbrugna...
EUVD-2007-1646
Malware in sbrugna...
EUVD-2008-6796
Malware in sbrugna...
EUVD-2019-13762
Malware in sbrugna...
EUVD-2010-3669
Malware in sbrugna...
EUVD-2018-12430
Malware in sbrugna...
EUVD-2019-0393
Malware in sbrugna...
EUVD-2015-2882
Malware in sbrugna...
EUVD-2021-25579
Malware in sbrugna...
EUVD-2021-19554
Malware in sbrugna...