CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 - bypass de SAML SSO fofa: app="ZABBIX-监控系统" && body="saml"...

netscaler-saml-memory-disclosure-security-assessment

CVE-2026-8451 - Citrix NetScaler SAML Memory Overread CitrixBleed Consultant-Style Cybersecurity Report Professional vulnerability assessment report for NetScaler SAML memory disclosure risk, including technical impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details ---|--...

POC-CVE-2026-60206

CVE-2026-60206 — Oracle WebLogic SAML Auth Bypass CVSS 9.9 — SAML authentication bypass in Oracle WebLogic Server Core. Affected: 12.2.1.4.0 14.1.1.0.0 14.1.2.0.0 15.1.1.0.0 ⚠️ Authorized security testing only. Install git clone https://github.com/imbas007/CVE-2026-60206.git cd CVE-2026-60206 pip...

CVE-2022-47966_checker

CVE-2022-47966checker Script rápido de PowerShell para buscar IOCs de ManageEngine CVE-2022-47966. El script analizará las solicitudes en los registros de acceso HTTP de ME. Si se encuentra una solicitud SAML característica, intentará decodificar y extraer la carga útil del atacante. Los hallazgo...

CVE-2026-60206

🚨 CVE-2026-60206 — WebLogic SAML Takeover Oracle WebLogic Server SAML Authentication Vulnerability A technical analysis of CVE-2026-60206 affecting Oracle WebLogic Server. 📖 Overview CVE-2026-60206 is a Critical CVSS 9.9 vulnerability affecting Oracle WebLogic Server. According to Oracle, a...

keycloak

CVE-2026-9794 — Keycloak SAML ECP Client Enumeration Security research leading to CVE-2026-9794 CVSS 5.3, Medium. Summary Unauthenticated client ID enumeration via SAML ECP faultstring oracle in Keycloak 2.0 through 26.6.1. Fixed in 26.6.3. Findings VULN-001: Client ID enumeration CVE-2026-9794 ✅...

fusionauth-samlv2

fusionauth-samlv2 This repository is SAML v2.0 bindings in Java using JAXB. You'd use this library to process SAML requests and responses. See the tests for example code. Security disclosures If you find a vulnerability or other security related bug, please report the vulnerability here before...

Poc-CVE-2024-32962-xml-crypto

Poc-CVE-2024-32962-xml-crypto A simulation of an attack exploiting the CVE-2024-32962 vulnerability to forge SAML messages and gain unauthorized permissions Very soon it will become available. Poc...

CVE-2022-39299_PoC_Generator

Exploiting CVE-2022-39299 Signature bypass via multiple root elements Advisory : https://github.com/node-saml/passport-saml/security/advisories/GHSA-m974-647v-whv7 Patch : https://github.com/node-saml/passport-saml/commit/8b7e3f5a91c8e5ac7e890a0c90bc7491ce33155e Base Payload Example Extracted Fro...

CVE-2017-11427-DEMO

CVE-2017-11427-DEMO Entorno básico $ sudo apt-get install libxml2-dev libxslt1-dev $ sudo apt-get install libxml2-dev libxmlsec1-dev libxmlsec1-openssl DEMO: $ git clone https://github.com/CHYbeta/CVE-2017-11427-DEMO.git $ cd CVE-2017-11427-DEMO $ source venv/bin/active $ cd vulnsaml $ python...

CVE-2021-21239

Informe Técnico sobre CVE-2021-21239: Vulnerabilidad de Autenticación SAML en Redash Introducción a SAML Security Assertion Markup Language SAML es un estándar abierto para intercambiar datos de autenticación y autorización entre partes en un sistema de identidad federada. Permite el inicio de...

CitrixADC-CVE-2020-8300

Detect Citrix ADC SAML action or SAML iDP Profile config vulnerable to CVE-2020-8300 using Citrix ADC NITRO API EXAMPLE & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" If this proves useful to anyone I will develop further with the...

CVE-2021-22123

CVE-2021-22123 Fortinet FortiWeb Authenticated OS Command Injection Hit Counter The command injection vulnerability in the FortiWeb management interface may allow an authenticated remote attacker to execute arbitrary commands in the system via the SAML server configuration page. Executing command...

Zabbix-CVE-2022-23131

Zabbix-CVE-2022-23131 Zabbix-SAML-Bypass: CVE-2022-23131 Description: Zabbix is vulnerable to Frontend Authentication Bypass Vulnerability with enabled SAML SSO authentication, due to insecure client-side session storage. On successful exploit of this issue, it allows a malicious actor to escalat...

CVE-2022-23131

CVE-2022-23131 Zabbix - Omisión de autenticación SAML SSO Descripción En el caso de instancias donde la autenticación SAML SSO está habilitada no predeterminada, los datos de sesión pueden ser modificados por un actor malicioso, porque un inicio de sesión de usuario almacenado en la sesión no fue...

CVE-2025-59718-PoC

CVE-2025-59718 Exploit Wizard Overview This tool is a proof-of-concept PoC exploit script for CVE-2025-59718, a critical authentication bypass vulnerability in Fortinet products e.g., FortiOS, FortiProxy, FortiSwitchManager due to improper verification of cryptographic signatures in SAML messages...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131Unsafe Session Storage 0x00 Introducción La vulnerabilidad de Zabbix CVE-2022-23131, obtuve accidentalmente el servidor Zabbix de una empresa extranjera. Zabbix Sia Zabbix es un sistema de monitoreo de código abierto de la empresa letona Zabbix SIA Zabbix Sia. El...

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779 , carries a CVSS score of 8.7 out of 10.0. "CVE-2026-88779 is a memory overflow...

CVE-2019-13496

CVE-2019-13496 Exploit Title: OTP bypass Filed Integrity check Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali Linux , Windows 7 ,Ubantu 16.04 To...

CVE-2024-21893.py

CVE-2024-21893 is server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication. run python CVE-2024-21893.py -u...