CitrixADC-CVE-2020-8300

Обнаружение конфигурации SAML action или SAML iDP Profile в Citrix ADC, уязвимой к CVE-2020-8300, с помощью Citrix ADC NITRO API ПРИМЕР & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" Если это окажется полезным, я доработаю инструмент,...

CVE-2026-107406 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: For the following versions: Applicable only...

CVE-2026-107406

A memory overflow vulnerability exists in NetScaler ADC and NetScaler Gateway when configured as a SAML SP or SAML IdP . This flaw can lead to Remote Code Execution (RCE) or a Denial of Service (DoS) . The vulnerability impacts various versions, including NetScaler ADC and Gateway versions before...

Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-107406

Severity - Critical Description of Problem A vulnerability has been discovered in Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of Citrix NetScaler ADC and Citrix...

vcenter_saml_login

vCenter SAML 로그인 도구 vCenter 백업에서 IdPIdentity Provider 인증서를 추출하고 Administrator로 로그인하기 위한 도구 배경 일반적으로 엔지니어링 진행 중 파일 서버에 있는 vCenter 백업에 접근하거나 최근 CVE를 통해 VCSA 호스트의 root 권한을 획득하게 됩니다. vCenter vSphere UI에 로그인하면 더 많은 시스템과 기밀 정보에 쉽게 접근할 수 있을 뿐만 아니라 고객에게 이러한 발견의 영향을 보여줄 수 있습니다. data.mdb 파일에는 인증서가 포함되어 있으며...

check-cve-2026-3055-netscaler

CVE-2026-3055 NetScaler SAML IdP 점검 Citrix NetScaler / NetScaler Gateway 어플라이언스에서 CVE-2026-3055SAML ID 공급자 로 동작할 때 발생하는 메모리 초과 읽기를 탐지하기 위한 Python 헬퍼입니다. 탐지 로직은 watchTowr Labs의 공개 분석 문서와 일치합니다. 사전 요구 사항 Python 3.10+ SAML IdP로 구성된 어플라이언스에만 적용됩니다. 해당 역할이 없는 게이트웨이는 일반적으로 /saml/login에서 404를 반환합니다. 이는 ...

CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC

🔓 CVE-2026-3055 - Эксплойт переполнения памяти Citrix NetScaler ⚠️ ПРЕДУПРЕЖДЕНИЕ Этот инструмент предназначен только для образовательных целей и авторизованного тестирования. Не используйте его на системах без явного разрешения. 📋 Описание Эксплойт для CVE-2026-3055 - уязвимость чтения за...

CVE-2026-3055

CVE-2026-3055 — Уязвимость безопасности Серьёзность: Н/Д CVSS: Н/Д Воздействие: Н/Д Опубликовано: 2026-03-23 Правовая информация Только для авторизованного тестирования безопасности. Корневая причина кратко Недостаточная проверка входных данных в NetScaler ADC и NetScaler Gateway при настройке в...

Moderate: Red Hat Security Advisory: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

sssd: sssd: IdP authentication prefix comparison allows cross-user impersonation

A flaw was found in SSSD's IdP authentication provider. The evalaccesstokenbuf function compares the OIDC subject identifier using strncmp with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An attacker whose IdP identifier is a strict prefix...

Linux Distros Unpatched Vulnerability : CVE-2026-104046

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD System Security Services Daemon. When Identity Provider IdP authentication is enabled, pre-authentication requests retain state in memo...

CVE-2026-101152

Insufficient validation in the Single Sign-On SSO login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider IdP to deliver authentication material to an attacker-controlled URL instead of to CloudVision...

CVE-2026-104046

A flaw was found in SSSD System Security Services Daemon. When Identity Provider IdP authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing...

CVE-2026-101152

A vulnerability exists in the Single Sign-On (SSO) login flow of CloudVision due to insufficient validation. A remote, unauthenticated attacker could craft a malicious URL that, when accessed by a user, tricks the identity provider (IdP) into delivering sensitive authentication material to an att...

CVE-2026-8451

🚨 CVE-2026-8451 - Vulnérabilité de dépassement de mémoire en lecture du SAML IdP NetScaler Une vulnérabilité de divulgation de mémoire sans authentification affectant Citrix NetScaler ADC et NetScaler Gateway configurés en tant que fournisseur d'identité SAML IdP. ✨ Aperçu CVE-2026-8451 est une...

CVE-2026-104046: Allocation of Resources Without Limits or Throttling

A flaw was found in SSSD System Security Services Daemon. When Identity Provider IdP authentication is enabled, pre-authentication requests retain state in memory without being cleared or timed out. A local attacker can repeatedly initiate authentication flows without completing them, causing...

Apache Configuration Injection via Unsanitized IdP Issuer Setting in Brocade Fabric OS Web Service Interface

: An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication FA, the system fails to sanitize the Identity Provider IdP issuer parameter. An authenticated administrator—or an...

CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105208

ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token so it is accepted for another user's external login intent. An attacker who predicts a victim's in-flight intent...

CVE-2026-105207

ZITADEL versions 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 are vulnerable to an account takeover due to improper verification when linking external identity providers. The User Service V2 AddIDPLink endpoint and identify-only Login V2 sessions fail to verify a primary factor or the caller's pe...