5252 matches found
[SECURITY] Fedora 40 Update: freeipa-4.12.2-3.fc40
IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...
CVE-2025-23369
CVE-2025-23369 affects GitHub Enterprise Server and centers on an improper verification of the cryptographic signature that can enable signature spoofing for unauthorized internal users. Public details indicate that versions before 3.12.14, 3.13.10, 3.14.7, 3.15.2, and 3.16.0 are impacted. Some c...
DEBIAN-CVE-2025-21664
In the Linux kernel, the following vulnerability has been resolved: dm thin: make getfirstthin use rcu-safe list first function The documentation in rculist.h explains the absence of listemptyrcu and cautions programmers against relying on a listempty - listfirst sequence in RCU safe code. This i...
The vulnerability of the glink component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the glink component in the Linux operating system’s kernel is related to single-shift errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-22146 Improper authentication on SAML SSO process allows user impersonation in sentry
Sentry is a developer-first error tracking and performance monitoring tool. A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via our private bug bounty program. The vulnerability allows an attacker to take over any user account by using a...
CVE-2024-45102
A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On SSO provider for XCC instances...
CVE-2024-45102
A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On SSO provider for XCC instances...
CVE-2024-45102
Lenovo XClarity Administrator (LXCA) privilege escalation vulnerability (CVE-2024-45102) could allow a valid, authenticated LXCA user to elevate privileges for a connected XCC instance when LXCA is used as the SSO provider. Exploitation status is not detailed in the provided sources; CVSS 3.1 bas...
CVE-2024-45102
A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On SSO provider for XCC instances...
Microsoft Azure On-Premises Data Gateway Information Disclosure (CVE-2025-21403)
The version of Azure On-Premises Data Gateway installed on the remote Windows host is 3000.246. It is, therefore, affected by an information disclosure vulnerability. This vulnerability only affects systems where an SAP HANA data source is configured for single sign-on SSO. Note that Nessus has n...
PT-2025-2685 · Lxca · Lxca
Name of the Vulnerable Software and Affected Versions: LXCA affected versions not specified Description: A privilege escalation issue was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On SSO...
CVE-2024-13301
CVE-2024-13301 concerns the Drupal OAuth & OpenID Connect Single Sign-On – SSO (OAuth/OIDC Client) module. The root cause is improper neutralization of input during web page generation, enabling a Cross-Site Scripting (XSS) vulnerability. Affected versions are Drupal OIDC SSO: 3.0.0 up to 3.44.0 ...
CVE-2024-13301 OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client allows Cross-Site Scripting XSS.This issue affects OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client: from 3.0.0...
CVE-2024-13301 OAuth & OpenID Connect Single Sign On – SSO (OAuth/OIDC Client) - Critical - Cross Site Scripting - SA-CONTRIB-2024-067
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client allows Cross-Site Scripting XSS.This issue affects OAuth & OpenID Connect Single Sign On – SSO OAuth/OIDC Client: from 3.0.0...
PT-2026-2882
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to affinity reprogramming on ASP chips. This issue affects systems utilizing an older variant of the GSP chip, specifically the ASP chip, found i...
Exploit for Unrestricted Upload of File with Dangerous Type in Cleo Harmony
更多PoC见 https://pc.fenchuan8.com//index?for...
SUSE CVE-2024-56719
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TSO DMA API usage causing oops Commit 66600fac7a98 "net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data" moved the assignment of txskbuffdma's members to be later in stmmactsoxmit. The buf dma...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of a single-byte overflow...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat
更多PoC见 https://pc.fenchuan8.com//index?forum=101158&yqm=DGR4X...
Security update for glib2
This update for glib2 fixes the following issues: CVE-2024-52533: Fixed a single byte buffer overflow bsc1233282. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed fo...