45 matches found
CitrixADC-CVE-2020-8300
Detectar configuración de acción SAML o perfil SAML iDP de Citrix ADC vulnerable a CVE-2020-8300 usando la API NITRO de Citrix ADC EJEMPLO & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" Si esto resulta útil para alguien, desarrollaré más...
CVE-2026-8451
🚨 CVE-2026-8451 - NetScaler SAML IdP 内存越界读取漏洞 一个影响 Citrix NetScaler ADC 和 NetScaler Gateway（配置为 SAML 身份提供商 IdP）的未授权内存泄露漏洞。 ✨ 概述 CVE-2026-8451 是一个高危 内存泄露漏洞，由 SAML 身份提供商请求处理过程中的越界读取（CWE-125） 导致。 未经身份验证的攻击者可发送特制的 SAML 请求触发内存溢出读取 ，可能泄露敏感进程内存。 📊 漏洞快照 属性| 值 ---|--- CVE| CVE-2026-8451 严重等级| 🔴 高危 CVSS| 8...
vcenter_saml_login
vCenter SAML Login Tool Una herramienta para extraer el certificado del proveedor de identidad IdP de las copias de seguridad de vCenter e iniciar sesión como Administrador Antecedentes Comúnmente, durante los compromisos, obtenemos acceso a las copias de seguridad de vCenter en un servidor de...
CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC
🔓 CVE-2026-3055 - Citrix NetScaler Memory Overread Exploit ⚠️ ADVERTENCIA Esta herramienta es solo para fines educativos y de prueba autorizada. No utilizar en sistemas sin permiso explícito. 📋 Descripción Exploit para CVE-2026-3055 - vulnerabilidad de lectura fuera de límites memory overread en...
CVE-2026-3055
CVE-2026-3055 - Vulnerabilidad de Seguridad Severidad: N/A CVSS: N/A Impacto: N/A Publicado: 2026-03-23 Legal Solo para pruebas de seguridad autorizadas. Causa raíz versión corta Validación de entrada insuficiente en NetScaler ADC y NetScaler Gateway cuando se configura como SAML IDP, lo que...
EUVD-2026-80069
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user...
CVE-2026-15640
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user...
CVE-2026-15640: Authentication Bypass by Spoofing
Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user...
CVE-2026-8451: Out-of-bounds Read
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP...
CVE-2026-41670: Improper Input Validation
Admidio is an open-source user management solution. Prior to version 5.0.9, the SAML IdP implementation in Admidio's SSO module uses the AssertionConsumerServiceURL value directly from incoming SAML AuthnRequest messages as the destination for the SAML response, without validating it against the...
Citrix NetScaler SAML IDP - Memory Overread
NetScaler ADC and NetScaler Gateway contain an insufficient input validation vulnerability when configured as a SAML IDP, leading to memory overread, letting attackers potentially access sensitive memory, exploit requires configuration as SAML IDP id: CVE-2026-3055 info: name: Citrix NetScaler SA...
Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug
A recently disclosed critical security flaw impacting Citrix NetScaler ADC and NetScaler Gateway is witnessing active reconnaissance activity, according to Defused Cyber and watchTowr. The vulnerability, CVE-2026-3055 CVSS score: 9.3, refers to a case of insufficient input validation leading to...
CVE-2026-3055: Out-of-bounds Read
Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread...
Open Redirect
Overview django-allauth is an integrated set of Django applications addressing authentication, registration, account management as well as 3rd party social account authentication. Affected versions of this package are vulnerable to Open Redirect via the SAML IDP-initiated SSO process. An attacker...
PYSEC-2026-56
An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled it is disabled by default, which may allow an attacker to redirect users to an arbitrary external website via a crafted URL...
CVE-2026-27982: URL Redirection to Untrusted Site
An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled it is disabled by default, which may allow an attacker to redirect users to an arbitrary external website via a crafted URL...
EUVD-2025-6814
Malicious code in bioql PyPI...
EUVD-2022-24360
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2017-10873
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenAM Open Source Edition allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability...
