5394 matches found
CVE-2026-62126
The miniOrange SAML SP Single Sign On WordPress plugin (versions
EUVD-2026-116774
Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-20-single-sign-on allows HTTP DoS.This issue affects SAML SP Single Sign On: from n/a through 6.1.0...
authelia
!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...
WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability
Denial of Service Attack vulnerability discovered by Jens Friess in WordPress Plugin SAML SP Single Sign On versions = 6.1.0...
VulnCheck KEV: CVE-2026-19842
The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticat...
CVE-2026-120263 Gitea OAuth2 account auto-linking takeover through the sign-up form
When oauth2client.ACCOUNTLINKING is set to auto not the default and registration is enabled, the link-account sign-up form looked up the existing account to link by the user name or email submitted in the form instead of the identity asserted by the OAuth2 provider. An attacker with an account on...
CVE-2026-120263 Gitea OAuth2 account auto-linking takeover through the sign-up form
When oauth2client.ACCOUNTLINKING is set to auto not the default and registration is enabled, the link-account sign-up form looked up the existing account to link by the user name or email submitted in the form instead of the identity asserted by the OAuth2 provider. An attacker with an account on...
CVE-2026-120263
The Gitea platform is vulnerable to an account takeover via the OAuth2 account auto-linking feature. When [oauth2_client].ACCOUNT_LINKING is set to auto and registration is enabled, the link-account sign-up form incorrectly identifies accounts using the username or email submitted in the form rat...
Ubuntu-0day
Ubuntu16.04-0day Vulnerability scope: all 4.4 ubuntu aws instances are vulnerable Jann Horn discovered that in some cases, the Berkeley Packet Filter BPF in the Linux kernel incorrectly performed sign extension in checkaluop. A local attacker can use this to escalate privileges on the system and...
-CVE-2022-22954-scanner
CVE-2022-22954-scanner Vulnerability Introduction VMware Workspace ONE Access formerly VMware Identity Manager enables employees to accelerate access to SaaS, web, and native mobile applications through multi-factor authentication, conditional access, and single sign-on. Affected versions: VMware...
cve-2022-23131
cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" Run python cve-2022-23131.py https://www.example.com Admin Use the exp to generate signedsession, replace the cookie, then click Sign in with Single Sign-On SAML Default is Admin Act responsibly, you bear the consequences A chance encounter, a...
OpenAM
Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements, and Web Services Security. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 & OpenID Connect ensure that OpenAM integrates easily with legacy, custom, a...
CVE-2021-4034
CVE-2021-4034 Exploit of the vulnerability CVE-2021-4034 Steps prior to execution: Add a . after the = in the GNCOV... folder...
auth
Auth - Authentication and User Management by Supabase Auth is a user management and authentication server written in Go that powers Supabase's features such as: Issuing JWTs Row Level Security with PostgREST User management Sign in with email, password, magic link, phone number Sign in with...
PUB-A-516888424
In GetSharedMemory of trustysharedmemorymanager.cc, there is a possible way to trigger an out of bounds read via sign extension of a negative buffer size due to an improper or implicit cast. This could lead to local information disclosure with System execution privileges needed. User interaction ...
PT-2026-134887
When oauth2 client.ACCOUNT LINKING is set to auto not the default and registration is enabled, the link-account sign-up form looked up the existing account to link by the user name or email submitted in the form instead of the identity asserted by the OAuth2 provider. An attacker with an account ...
CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-
This repository does not have a README...
teleport
Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...