Shibboleth OIDC OP <3.0.4 - Server-Side Request Forgery

The Shibboleth Identity Provider OIDC OP plugin before 3.0.4 is vulnerable to server-side request forgery SSRF due to insufficient restriction of the requesturi parameter, which allows attackers to interact with arbitrary third-party HTTP services. id: CVE-2022-24129 info: name: Shibboleth OIDC O...

Astra Linux – Vulnerability in xmltooling

Shibboleth XMLTooling before version 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allowed SSRF through a specially crafted KeyInfo element. This issue has been fixed, for example, in Shibboleth Service Provider 3.4.1.3 on Windows...

Shibboleth SSO Open Redirect

Shibboleth Service Provider SP contains an open redirect vulnerability. An attacker can exploit this vulnerability to redirect users to malicious websites, potentially leading to phishing attacks or other malicious activities. This issue arises when the 'redirectLimit' configuration option is not...

CVE-2021-28963

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...

CVE-2021-31826

Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable for a daemon crash on systems not using this feature if a crafted cookie is supplied...

EUVD-2021-15612

Malware in sbrugna...

EUVD-2017-9390

Malware in sbrugna...

EUVD-2009-3457

Malware in sbrugna...

EUVD-2009-3458

Malware in sbrugna...

EUVD-2015-5468

Malware in sbrugna...

EUVD-2020-20470

Malware in sbrugna...

EUVD-2015-3420

Malware in sbrugna...

EUVD-2018-1312

Malware in sbrugna...

EUVD-2011-2501

Malware in sbrugna...

EUVD-2021-18701

Malware in sbrugna...

EUVD-2010-2459

Malware in sbrugna...

EUVD-2012-4423

Malware in sbrugna...

EUVD-2015-2775

Malware in sbrugna...

EUVD-2019-8823

Malware in sbrugna...

EUVD-2017-8026

Malware in sbrugna...