EUVD-2026-80069

Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user...

CVE-2026-8451

🚨 CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. ✨ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...

CitrixADC-CVE-2020-8300

使用 Citrix ADC NITRO API 检测存在 CVE-2020-8300 漏洞的 Citrix ADC SAML 操作或 SAML iDP 配置文件 示例 root@kitploit: & '.\CitrixADC-CVE-2020-8300.ps1' -NSIPProtocol http -NSIP 10.10.10.10 -user nitro -pass "SshhhItsASecret" 如果这个工具对大家有用，我将进一步开发以下功能： 识别 SAML 操作和 SAML iDP 配置文件的绑定关系，以确认它们是否被使用以及在哪里使用 通过检查 relaystateru...

vcenter_saml_login

vCenter SAML 登录工具 一款用于从 vCenter 备份中提取身份提供程序（IdP）证书并以 Administrator 身份登录的工具 背景 通常在渗透测试任务中，我们会通过近期披露的 CVE 获得文件服务器上 vCenter 备份的访问权限，或获得 VCSA 主机的 root 权限。登录 vCenter vSphere UI 可以让我们轻松访问更多系统、获取机密信息，并向客户展示这些发现的影响。 data.mdb 文件包含这些证书，可在 vCenter 备份中找到，也可在具有 root 权限的 VCSA 主机上找到。这些证书以明文存储，可用于为任何用户（包括内置的...

CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC

🔓 CVE-2026-3055 - Citrix NetScaler 内存越界读取漏洞利用 ⚠️ 警告 此工具仅用于教育和授权测试目的。未经明确许可，请勿在系统上使用。 📋 描述 针对 CVE-2026-3055 的漏洞利用 - 当 NetScaler ADC 和 NetScaler Gateway 配置为 SAML IDP 时存在的内存越界读取（memory overread）漏洞。 🔍 CVSS 评分：9.3 严重 向量 : CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H CWE : CWE-125（越界读取） CISA KEV :...

CVE-2026-3055

CVE-2026-3055 - 安全漏洞 严重性： 不适用 CVSS： 不适用 影响： 不适用 发布时间： 2026-03-23 法律声明 仅限授权安全测试使用。 根本原因（简述） 当 NetScaler ADC 和 NetScaler Gateway 配置为 SAML IDP 时，输入验证不足，导致内存过度读取 利用条件 可访问的易受攻击目标 可预测的用户/工作流上下文 无阻止恶意请求的额外加固措施 使用方法 root@kitploit: python3 exploit.py https://target.tld 检测 监控可疑的身份验证流程偏差 调查与 CVE-2026-3055...

Citrix NetScaler SAML IDP - Memory Overread

NetScaler ADC and NetScaler Gateway contain an insufficient input validation vulnerability when configured as a SAML IDP, leading to memory overread, letting attackers potentially access sensitive memory, exploit requires configuration as SAML IDP id: CVE-2026-3055 info: name: Citrix NetScaler SA...

Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug

A recently disclosed critical security flaw impacting Citrix NetScaler ADC and NetScaler Gateway is witnessing active reconnaissance activity, according to Defused Cyber and watchTowr. The vulnerability, CVE-2026-3055 CVSS score: 9.3, refers to a case of insufficient input validation leading to...

Open Redirect

Overview django-allauth is an integrated set of Django applications addressing authentication, registration, account management as well as 3rd party social account authentication. Affected versions of this package are vulnerable to Open Redirect via the SAML IDP-initiated SSO process. An attacker...

PYSEC-2026-56

An open redirect vulnerability exists in django-allauth versions prior to 65.14.1 when SAML IdP initiated SSO is enabled it is disabled by default, which may allow an attacker to redirect users to an arbitrary external website via a crafted URL...

EUVD-2025-6814

Malicious code in bioql PyPI...

EUVD-2022-24360

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-10873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenAM Open Source Edition allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability...

CVE-2025-8662

OpenAM OpenAM Consortium Edition contains a vulnerability that may cause it to malfunction as a SAML IdP due to a tampered request.This issue affects OpenAM: from 14.0.0 through 14.0.1...

lunary cross-site scripting vulnerability (CNVD-2025-08307)

lunary is lunary open source a production toolkit for LLM . lunary cross-site scripting vulnerability , the vulnerability stems from the SAML IdP XML metadata on user-supplied data lack of effective filtering and escaping , an attacker can use the vulnerability to obtain and modify sensitive...

CVE-2025-0281

A stored cross-site scripting XSS vulnerability exists in lunary-ai/lunary versions 1.6.7 and earlier. An attacker can inject malicious JavaScript into the SAML IdP XML metadata, which is used to generate the SAML login redirect URL. This URL is then set as the value of window.location.href witho...

CVE-2025-0281 Stored Cross-Site Scripting (XSS) in lunary-ai/lunary

A stored cross-site scripting XSS vulnerability exists in lunary-ai/lunary versions 1.6.7 and earlier. An attacker can inject malicious JavaScript into the SAML IdP XML metadata, which is used to generate the SAML login redirect URL. This URL is then set as the value of window.location.href witho...

CVE-2025-0281

Summary: CVE-2025-0281 is a stored XSS in lunary-ai/lunary (v1.6.7 and earlier) where an attacker can inject JavaScript via the SAML IdP XML metadata’s Location attribute; the malicious URL is later assigned to window.location.href, enabling script execution in the user’s browser and potential se...

CVE-2025-0281 Stored Cross-Site Scripting (XSS) in lunary-ai/lunary

A stored cross-site scripting XSS vulnerability exists in lunary-ai/lunary versions 1.6.7 and earlier. An attacker can inject malicious JavaScript into the SAML IdP XML metadata, which is used to generate the SAML login redirect URL. This URL is then set as the value of window.location.href witho...

Stored Cross-Site Scripting (XSS) via SAML IdP XML Injection

An attacker can achieve stored cross-site scripting XSS by injecting malicious JavaScript into the SAML IdP XML metadata. This metadata is used to generate the SAML login redirect URL, which is ultimately set as the value of window.location.href. This vulnerability allows the attacker to execute...