Lucene search
+L

33 matches found

EUVD
EUVD
added 2026/09/16 12:31 a.m.8 views

EUVD-2026-80069

Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user...

9.5CVSS5.7AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/15 1:27 p.m.9 views

CVE-2026-8451

🚨 CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. ✨ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...

8.8CVSS8.4AI score0.15654EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 12:11 p.m.9 views

CitrixADC-CVE-2020-8300

使用 Citrix ADC NITRO API 检测存在 CVE-2020-8300 漏洞的 Citrix ADC SAML 操作或 SAML iDP 配置文件 示例 root@kitploit: & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" 如果这个工具对大家有用,我将进一步开发以下功能: 识别 SAML 操作和 SAML iDP 配置文件的绑定关系,以确认它们是否被使用以及在哪里使用 通过检查 relaystateru...

6.5CVSS7AI score0.02997EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 8:17 p.m.6 views

vcenter_saml_login

vCenter SAML Login Tool A tool to extract the Identity Provider IdP cert from vCenter backups and log in as Administrator Background Commonly, during engagements, we will gain access to vCenter backups on a fileserver or gain root access to the VCSA host through recent CVEs. Logging into the...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/10 1:02 a.m.12 views

CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC

🔓 CVE-2026-3055 - Citrix NetScaler Memory Overread Exploit ⚠️ WARNING This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission. 📋 Description Exploit for CVE-2026-3055 - out-of-bounds read memory overread vulnerability in NetScaler ADC an...

9.8CVSS8.6AI score0.87166EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/09 6:04 p.m.8 views

CVE-2026-3055

CVE-2026-3055 - Security Vulnerability Severity: N/A CVSS: N/A Impact: N/A Published: 2026-03-23 Legal For authorized security testing only. Root Cause short version Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread...

9.8CVSS8.8AI score0.87166EPSS
SaveExploits7
Nuclei
Nuclei
added 2026/03/30 4:19 p.m.48 views

Citrix NetScaler SAML IDP - Memory Overread

NetScaler ADC and NetScaler Gateway contain an insufficient input validation vulnerability when configured as a SAML IDP, leading to memory overread, letting attackers potentially access sensitive memory, exploit requires configuration as SAML IDP id: CVE-2026-3055 info: name: Citrix NetScaler SA...

9.8CVSS7.4AI score0.87166EPSS
SaveExploits7References3
The Hacker News
The Hacker News
added 2026/03/28 9:11 a.m.23 views

Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug

A recently disclosed critical security flaw impacting Citrix NetScaler ADC and NetScaler Gateway is witnessing active reconnaissance activity, according to Defused Cyber and watchTowr. The vulnerability, CVE-2026-3055 CVSS score: 9.3, refers to a case of insufficient input validation leading to...

9.8CVSS7.3AI score0.99999EPSS
SaveExploits43
Snyk
Snyk
added 2026/03/05 8:14 a.m.5 views

Open Redirect

Overview django-allauth is an integrated set of Django applications addressing authentication, registration, account management as well as 3rd party social account authentication. Affected versions of this package are vulnerable to Open Redirect via the SAML IDP-initiated SSO process. An attacker...

6.1CVSS5.9AI score0.00159EPSS
SaveExploits0References2
PyPA
PyPA
added 2026/03/05 6:16 a.m.37 views

PYSEC-2026-56

An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled it is disabled by default, which may allow an attacker to redirect users to an arbitrary external website via a crafted URL...

6.1CVSS5.9AI score0.00159EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2025-6814

Malicious code in bioql PyPI...

7.3CVSS6.5AI score0.00376EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2022-24360

Malicious code in bioql PyPI...

4.8CVSS5.2AI score0.00667EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2017-10873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenAM Open Source Edition allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability...

8.1CVSS7.1AI score0.02625EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/02 3:15 a.m.7 views

CVE-2025-8662

OpenAM OpenAM Consortium Edition contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1...

4.3CVSS7AI score
SaveExploits0References1
CNVD
CNVD
added 2025/03/27 12:00 a.m.15 views

lunary cross-site scripting vulnerability (CNVD-2025-08307)

lunary is lunary open source a production toolkit for LLM . lunary cross-site scripting vulnerability , the vulnerability stems from the SAML IdP XML metadata on user-supplied data lack of effective filtering and escaping , an attacker can use the vulnerability to obtain and modify sensitive...

7.3CVSS5.8AI score0.00376EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/03/22 12:38 p.m.20 views

CVE-2025-0281

A stored cross-site scripting XSS vulnerability exists in lunary-ai/lunary versions 1.6.7 and earlier. An attacker can inject malicious JavaScript into the SAML IdP XML metadata, which is used to generate the SAML login redirect URL. This URL is then set as the value of window.location.href witho...

7.3CVSS5.6AI score0.00376EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/03/20 10:10 a.m.10 views

CVE-2025-0281 Stored Cross-Site Scripting (XSS) in lunary-ai/lunary

A stored cross-site scripting XSS vulnerability exists in lunary-ai/lunary versions 1.6.7 and earlier. An attacker can inject malicious JavaScript into the SAML IdP XML metadata, which is used to generate the SAML login redirect URL. This URL is then set as the value of window.location.href witho...

7.3CVSS6.5AI score0.00376EPSS
SaveExploits1References2
CVE
CVE
added 2025/03/20 10:10 a.m.82 views

CVE-2025-0281

Summary: CVE-2025-0281 is a stored XSS in lunary-ai/lunary (v1.6.7 and earlier) where an attacker can inject JavaScript via the SAML IdP XML metadata’s Location attribute; the malicious URL is later assigned to window.location.href, enabling script execution in the user’s browser and potential se...

7.3CVSS5.6AI score0.00376EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/03/20 10:10 a.m.44 views

CVE-2025-0281 Stored Cross-Site Scripting (XSS) in lunary-ai/lunary

A stored cross-site scripting XSS vulnerability exists in lunary-ai/lunary versions 1.6.7 and earlier. An attacker can inject malicious JavaScript into the SAML IdP XML metadata, which is used to generate the SAML login redirect URL. This URL is then set as the value of window.location.href witho...

7.3CVSS0.00376EPSS
SaveExploits1References2
Huntr
Huntr
added 2024/11/17 7:58 p.m.10 views

Stored Cross-Site Scripting (XSS) via SAML IdP XML Injection

An attacker can achieve stored cross-site scripting XSS by injecting malicious JavaScript into the SAML IdP XML metadata. This metadata is used to generate the SAML login redirect URL, which is ultimately set as the value of window.location.href. This vulnerability allows the attacker to execute...

7.3CVSS6.2AI score0.00376EPSS
SaveExploits1
Rows per page
Query Builder