PT-2025-45110

Name of the Vulnerable Software and Affected Versions Entr'ouvert Lasso versions 2.5.1 and 2.8.2 Description A type confusion issue exists within the lasso node impl init from xml function. A specially crafted SAML response can trigger this issue, potentially leading to arbitrary code execution. ...

Linux Distros Unpatched Vulnerability : CVE-2025-46705

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion respons...

Linux Distros Unpatched Vulnerability : CVE-2025-46404

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can...

Entr'ouvert Lasso lasso_node_impl_init_from_xml type confusion vulnerability

Talos Vulnerability Report TALOS-2025-2193 Entr'ouvert Lasso lassonodeimplinitfromxml type confusion vulnerability November 5, 2025 CVE Number CVE-2025-47151 SUMMARY A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A special...

EUVD-2020-0457

Malware in sbrugna...

EUVD-2018-13779

Malware in sbrugna...

EUVD-2019-4957

Malware in sbrugna...

EUVD-2018-13778

Malware in sbrugna...

EUVD-2019-3981

Malware in sbrugna...

EUVD-2019-8355

Malware in sbrugna...

EUVD-2013-0593

Malware in sbrugna...

EUVD-2023-1953

Malicious code in bioql PyPI...

EUVD-2025-7788

Malicious code in bioql PyPI...

EUVD-2023-25057

Malicious code in bioql PyPI...

EUVD-2023-1724

Malicious code in bioql PyPI...

EUVD-2025-27518

Malicious code in bioql PyPI...

EUVD-2022-1220

Malicious code in bioql PyPI...

EUVD-2024-54564

Malicious code in bioql PyPI...

EUVD-2022-4278

Malicious code in bioql PyPI...

CVE-2025-9943

An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...