SpecterOps
3 credited records · 0 in the last 12 months · 0 in CISA KEV
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.
Get told when this name is credited on a new CVE
If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.
Credited records
Researchers| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2025-34064No exploit | OneLogin AD Connector Log S3 Bucket Hijack Leading to Cross-Tenant Data Leakageone identity · onelogin active directory connector (adc) · CWE-200 | Critical9.0 | — | 0.5% | Jul 1, 2025 |
40Plan | CVE-2025-34063No exploit | OneLogin AD Connector JWT Authentication Bypass via Exposed Signing Keyone identity · onelogin active directory connector (adc) · CWE-290 | Critical10.0 | — | 0.6% | Jul 1, 2025 |
22Monitor | CVE-2025-34062No exploit | OneLogin AD Connector API Credential and Signing Key Exposureone identity · onelogin active directory connector (adc) · CWE-200 | Medium5.7 | — | 0.1% | Jul 1, 2025 |
- CVE-2025-3406436Monitor
OneLogin AD Connector Log S3 Bucket Hijack Leading to Cross-Tenant Data Leakage
CriticalCVSS 9.0No exploitEPSS 0%one identity · onelogin active directory connector (adc)Jul 1, 2025
- CVE-2025-3406340Plan
OneLogin AD Connector JWT Authentication Bypass via Exposed Signing Key
CriticalCVSS 10.0No exploitEPSS 0%one identity · onelogin active directory connector (adc)Jul 1, 2025
- CVE-2025-3406222Monitor
OneLogin AD Connector API Credential and Signing Key Exposure
MediumCVSS 5.7No exploitEPSS 0%one identity · onelogin active directory connector (adc)Jul 1, 2025