190 matches found
EUVD-2013-3642
Malware in sbrugna...
EUVD-2018-10124
Malware in sbrugna...
EUVD-2021-19388
Malware in sbrugna...
EUVD-2018-7620
Malware in sbrugna...
EUVD-2021-2354
Malware in sbrugna...
EUVD-2017-0189
Malware in sbrugna...
GHSA-F2HF-PFRJ-VRM7 XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
XWiki OIDC Authenticator: Users with "view" access can create tokens for any users they can view
Impact Anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user since users are very commonly viewable, at least to other registered users. Patches Version 2.18.2...
CVE-2025-49594
XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Starting in version 2.17.1 and prior to version 2.18.2, anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows...
EUVD-2025-32541
XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Starting in version 2.17.1 and prior to version 2.18.2, anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows...
CVE-2025-49594
Summary : CVE-2025-49594 affects XWiki OIDC. From version 2.17.1 up to, but not including, 2.18.2, any user with VIEW access to another user’s profile can forge a token for that user. If the instance allows token authentication, this enables authentication as any user whose profile is viewable. I...
PT-2025-40900
Name of the Vulnerable Software and Affected Versions XWiki versions 2.17.1 through 2.18.1 Description XWiki OpenID Connect OIDC contains tools for manipulating the OpenID Connect protocol. Individuals with VIEW access to a user profile can generate a token for that user in versions prior to...
EUVD-2022-43238
Malicious code in bioql PyPI...
EUVD-2022-2935
Malicious code in bioql PyPI...
EUVD-2025-14189
Malicious code in bioql PyPI...
EUVD-2021-9409
Malicious code in bioql PyPI...
EUVD-2022-3123
Malicious code in bioql PyPI...
EUVD-2022-52127
Malicious code in bioql PyPI...
EUVD-2021-6540
Malicious code in bioql PyPI...
EUVD-2025-14675
Malicious code in bioql PyPI...