543 matches found
org.keycloak/keycloak-services: WebAuthn Attestation Statement Verification Bypass
A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the configured attestation policy and register untrusted or forged authenticators via submission of an attestation object with fmt: "none", even when the realm is configured to require...
Fedora 43 : webkitgtk (2025-6f3e9e3af6)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6f3e9e3af6 advisory. Prevent unsafe URI schemes from participating in media playback. Make jscvaluearraybuffergetdata function introspectable. Fix logging in to Google...
org.keycloak/keycloak-services: WebAuthn Attestation Statement Verification Bypass
A flaw was found in Keycloak’s WebAuthn registration component. This vulnerability allows an attacker to bypass the configured attestation policy and register untrusted or forged authenticators via submission of an attestation object with fmt: "none", even when the realm is configured to require...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via manipulation of the Forwarded or X-Forwarded-Host headers used to construct password reset confirmation links. An attacker can gain unauthorized access to user accounts by tricking users into clicking a password reset...
Missing Critical Step in Authentication
Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Missing Critical Step in Authentication in the WebAuthn Attestation Statement verification. An attacker can...
CVE-2025-62652
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
EUVD-2025-34941
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
CVE-2025-62652
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
CVE-2025-62652
CVE-2025-62652 is a stored XSS in the Wikimedia Foundation MediaWiki WebAuthn extension (versions 1.39, 1.43, 1.44). The underlying issue is improper neutralization of input during web page generation, enabling stored Cross-Site Scripting. Affected component: WebAuthn extension for MediaWiki; imp...
CVE-2025-62652 Stored XSS in WebAuthn key name
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
CVE-2025-62652 Stored XSS in WebAuthn key name
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...
Mediawiki - WebAuthn Extension 安全漏洞
Mediawiki - WebAuthn Extension is an open source two-factor authentication plugin for Mediawiki. A security vulnerability exists in Mediawiki - WebAuthn Extension versions 1.39, 1.43, and 1.44, which stems from improper input neutralization during web page generation and could lead to a stored...
EUVD-2020-29108
Malware in sbrugna...
EUVD-2021-19508
Malware in sbrugna...
EUVD-2021-1997
Malware in sbrugna...
EUVD-2021-27982
Malicious code in bioql PyPI...
EUVD-2022-53140
Malicious code in bioql PyPI...
EUVD-2024-49668
Malicious code in bioql PyPI...