vcenter_saml_login

vCenter SAML Login Tool Un outil pour extraire le certificat du fournisseur d'identité IdP des sauvegardes vCenter et se connecter en tant qu'Administrateur Contexte Généralement, lors de missions, nous accédons aux sauvegardes vCenter sur un serveur de fichiers ou obtenons un accès root à l'hôte...

CVE-2026-60206

CVE-2026-60206 – PoC de contournement de l'authentification SAML d'Oracle WebLogic Server Ce dépôt fournit un exploit de preuve de concept pour CVE‑2026‑60206 , une vulnérabilité critique de contournement de l'authentification dans l'implémentation SAML d'Oracle WebLogic Server. Cette faille perm...

CVE-2026-75807

The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.4.6. This is due to the mosamlloginvalidate ACS handler persisting the X.509 certificate extracted from an incoming SAMLResponse into the mosamlrequiredcertificate...

EUVD-2026-62502

The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.19.3, 4.20.2, 5.0.6, and 6.2.1, the HTTPArtifact::receive flow can treat an unsigned embedded SAML Response as cryptographically valid for the wrong identity provider. SOAPClient::addSSLValidator...

picketlink-federation: auth bypass in Picketlink SAML unsolicited-response

A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed attacker to authenticate as any principal in any role. This could lead to information disclosure, access to restricted...

CVE-2026-18089

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verifyxml when no trust anchor is configured. verifyxml in Net::SAML2::Role::VerifyXML runs "return if !$anchors && !$cacert;" as soon as the XML::Sig chec...