EUVD-2022-5052

Malicious code in bioql PyPI...

CVE-2021-29108

There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another account XML Signature Wrapping Attack. In...

Privilege escalation

There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another account XML Signature Wrapping Attack. In...

CVE-2021-29108

The CVE-2021-29108 vulnerability affects Esri Portal for ArcGIS versions 10.9 and earlier. It enables a privileged escalation via an XML Signature Wrapping Attack where a remote, authenticated attacker who can intercept/modify a SAML assertion impersonates another account. The issue is triggered ...

CVE-2021-29108 There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below.

There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another account XML Signature Wrapping Attack. In...

CVE-2021-29108: Improper Verification of Cryptographic Signature

There is an privilege escalation vulnerability in organization-specific logins in Esri Portal for ArcGIS versions 10.9 and below that may allow a remote, authenticated attacker who is able to intercept and modify a SAML assertion to impersonate another account XML Signature Wrapping Attack. In...

XML Signature Wrapping Attack

pyxmlsecurity is vulnerable to XML signature wrapping attacks. A flaw in the verify function allows attackers to modify the message by injecting forged elements which do not invalidate the XML Signature...

CVE-2012-4418

Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."...

CVE-2012-4418

Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."...

CVE-2012-4418: Improper Authentication

Apache Axis2 allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."...

PT-2012-5389

Name of the Vulnerable Software and Affected Versions Apache Axis2 affected versions not specified Description The issue allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack." Recommendations At the moment, there is no information about a newer...

CVE-2011-1411

Shibboleth OpenSAML library 2.4.x before 2.4.3 and 2.5.x before 2.5.1, and IdP before 2.3.2, allows remote attackers to forge messages and bypass authentication via an "XML Signature wrapping attack."...

PT-2011-3107

Name of the Vulnerable Software and Affected Versions Shibboleth OpenSAML library versions 2.4.x through 2.4.2 Shibboleth OpenSAML library versions 2.5.x through 2.5.0 Shibboleth IdP versions prior to 2.3.2 Description The issue allows remote attackers to forge messages and bypass authentication...