10 matches found
CVE-2019-20437
An issue was discovered in WSO2 API Manager 2.6.0, WSO2 IS as Key Manager 5.7.0, and WSO2 Identity Server 5.8.0. When a custom claim dialect with an XSS payload is configured in the identity provider basic claim configuration, that payload gets executed, if a user picks up that dialect's URI as t...
EUVD-2021-2453
Malware in sbrugna...
EUVD-2022-49181
Malicious code in bioql PyPI...
EUVD-2023-58745
Malicious code in bioql PyPI...
EUVD-2022-51063
Malicious code in bioql PyPI...
CVE-2024-12602
Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-32697
creationtimestamp| type| source ---|---|--- 2024-02-09 02:16:42+00:00| seen| https://t.me/ctinow/181761 2025-08-19 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrsq2h4ps2m...
PT-2022-15456 · Ibm · Ibm Websphere Application Server Liberty +1
Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty versions 17.0.0.3 through 22.0.0.7 Open Liberty Description: The issue allows an authenticated user to perform identity spoofing using a specially crafted request. Recommendations: For IBM WebSphere...
CVE-2018-1000891
creationtimestamp| type| source ---|---|--- 2020-12-23 21:13:03+00:00| seen| https://t.me/cibsecurity/21244...
CVE-2018-1000165
LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. This vulnerability appears to have been fixed in 1.3.5 and later...