151 matches found
tu-TOCTOU-kaiu-TOCMEU-CVE-2020-13162-
Pulse Secure Windows Client https://www.redtimmy.com/privilege-escalation/pulse-secure-windows-client/ und https://www.redtimmy.com/privilege-escalation/pulse-secure-client-for-windows-9-1-6-toctou-privilege-escalation-cve-2020-13162/...
CVE-2023-20178
CVE-2023-20178 Dies ist ein PoC für eine Schwachstelle zum Löschen beliebiger Dateien in Cisco Secure Client getestet auf Version 5.0.01242 und Cisco AnyConnect getestet auf Version 4.10.06079. Wenn ein Benutzer eine Verbindung zum VPN herstellt, wird der Prozess vpndownloader.exe im Hintergrund...
CVE-2026-18211
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...
CVE-2026-18211
CVE-2026-18211 affects Keycloak core services, specifically the secure-client-uris policy executor. Affected component enforces security requirements on client configurations (e.g., redirect URIs) but contains an improper check that only inspects the start of a URL rather than validating the host...
CVE-2026-18211 Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...
CVE-2026-18211 Keycloak-services: keycloak-services: secure-client-uris policy bypass via localhost-prefixed domains
A flaw was found in the secure-client-uris client policy executor within Keycloak core services. This component is responsible for enforcing security requirements on client configurations, such as requiring encrypted connections for redirect URIs. Due to an improper check that only looks at the...
Improperly Implemented Security Check for Standard
Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improperly Implemented Security Check for Standard through the secure-client-uris client policy executor in t...
EUVD-2006-0969
Malware in sbrugna...
EUVD-2018-19297
Malware in sbrugna...
EUVD-2020-5435
Malware in sbrugna...
EUVD-2024-45518
Malicious code in bioql PyPI...
EUVD-2023-38379
Malicious code in bioql PyPI...
EUVD-2024-18106
Malicious code in bioql PyPI...
EUVD-2024-18189
Malicious code in bioql PyPI...
EUVD-2023-24420
Malicious code in bioql PyPI...
EUVD-2023-24419
Malicious code in bioql PyPI...
EUVD-2024-18053
Malicious code in bioql PyPI...
EUVD-2024-18052
Malicious code in bioql PyPI...
CVE-2024-20391
A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...
CVE-2024-20474
A vulnerability in Internet Key Exchange version 2 IKEv2 processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this...