CVE-2022-23131

zabbix-saml-bypass-poc cve-2022-23131 Este programa es solo para uso interno de autoevaluación de riesgos por parte de los usuarios empresariales del cliente. Prohibido su uso para cualquier forma de prueba de seguridad no autorizada. fofa: app="ZABBIX-监控系统" && body="saml" Uso: go build -o zexp...

CVE-2026-25604-PoC

CVE-2026-25604 PoC Host Header Injection leading to SAML authentication bypass in Apache Airflow's AWS Auth Manager An attacker can inject a malicious Host header into the SAML login flow, causing the Assertion Consumer Service ACS URL to point to an attacker-controlled server. This allows the...

zabbix-cve-2022-23131

cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. Reemplace zbxsignedsession por cookie 2. Inicie sesión con Single Sign-On SAML autor: @random-robbie、@jweny y @Mr-xn enlace: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...

cve-2022-23131

cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. reemplaza zbxsignedsession por cookie 2. inicia sesión con Single Sign-On SAML autor: @random-robbie、@jweny y @Mr-xn link: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...

My-Presentation-Slides

My-Presentation-Slides Collections of Dhiyaneshwaran public presentation slides. You can find me at: Blog: https://dhiyaneshgeek.github.io Twitter: @DhiyaneshDk Hackerone: Geek Freak LinkedIn: Dhiyaneshwaran Balasubramaniam 2026 Hands-On Supply Chain Recon & Vendor Risk Mapping Recon Village @ DE...

CVE-2022-26138

CVE-2022-26138 CVE-2022-23131 - bypass de SAML SSO fofa: iconhash="-305179312"...

CVE-2025-23369_SAML_bypass

bypass github...

CVE-2026-56207 Apache Impala: SAML authentication bypass via forged bearer token

Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user. This issue affects Apache Impala: =4.0.0. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

EUVD-2026-72177

MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parseassertion builds Net::SAML2::Binding::POST without a trust anchor. parseassertion in MojoX::Authentication::Model::SAML2 calls Net::SAML2::Binding::POST-new with no cacert, certtext or anchors...

CVE-2026-86304

MojoX::Authentication for Perl versions prior to 0.006 is vulnerable to a SAML authentication bypass . The parse_assertion function in MojoX::Authentication::Model::SAML2 initializes Net::SAML2::Binding::POST without a trust anchor. When used with Net::SAML2 versions before 0.86 , the signature o...

PT-2026-86577

Name of the Vulnerable Software and Affected Versions MojoX::Authentication versions prior to 0.006 Description An authentication bypass exists in the SAML implementation. The parse assertion function in MojoX::Authentication::Model::SAML2 initializes Net::SAML2::Binding::POST without a trust...

Exploit for CVE-2026-19490

CVE-2026-19490 — NetScaler ADC/Gateway SAML authentication byp...

CVE-2026-79772 Nokogiri before 1.19.1 Unchecked Return Value canonicalize

Nokogiri versions before 1.19.1 fail to check the return value from xmlC14NExecute in the canonicalize method, returning an empty string on failure instead of raising an exception. Attackers can exploit this to bypass signature validation in downstream SAML libraries by providing invalid...

CVE-2026-7557 SAML authentication bypass in Progress MarkLogic Server

An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass authentication and impersonate any user, including administrators. This vulnerability affec...

CVE-2026-18089

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verifyxml when no trust anchor is configured. verifyxml in Net::SAML2::Role::VerifyXML runs "return if !$anchors && !$cacert;" as soon as the XML::Sig chec...

PT-2026-67393

Name of the Vulnerable Software and Affected Versions Net::SAML2 versions prior to 0.86 Description An authentication bypass exists when no trust anchor is configured. The verify xml function in Net::SAML2::Role::VerifyXML allows responses to be verified against the certificate embedded within th...

PT-2026-67394

Name of the Vulnerable Software and Affected Versions Net::SAML2 versions prior to 0.86 Description An authentication bypass exists due to XML signature wrapping. The new from xml function retrieves identity fields—including NameID, attribute values, SessionIndex, and audience—using document-wide...

Apache Airflow AWS Auth Manager has Host Header Injection Leading to SAML Authentication Bypass

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL.This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances.You shoul...

PYSEC-2026-2363 Apache Airflow AWS Auth Manager has Host Header Injection Leading to SAML Authentication Bypass

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances. You...

CVE-2026-25604 Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances. You...