CVE-2020-3580

CVE-2020-3580 Cisco ASA / FTD 在 WebVPN SAML SP ACS 端点 /+CSCOE+/saml/sp/acs 中存在反射型 XSS 漏洞。已在 cisco-sa-asaftd-xss-multiple-FCB3vPZe 中修补。 本仓库包含： xss.html — 针对授权目标的人工可验证 PoC。 src/ — 发现 + 范围感知验证管道。 docs/ — 方法论和道德规范。 管道功能 ┌──────────┐ ┌──────────────┐ ┌────────────────────┐ ┌────────────────┐...

CLEANSTART-2024-DI95704 Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability

Security vulnerability affects the drupal7 package. Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability...

WordPress SAML Single Sign On plugin < 6.0.0 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin SAML SP Single Sign On versions 6.0.0...

HPESBMU05147 rev.1 - HPE IceWall products, Denial of Service vulnerability

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall Federation Agent 4.0 RHEL7, RHEL8, RHEL9, RHEL10, Windows IceWall Federation Proxy 4.0 RHEL8, RHEL9, RHEL10, Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | -...

PT-2026-89249

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module contains embedded credentials used by the functionality provided by the module. Under certain circumstances, these credentials could...

PT-2026-89246

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module does not properly restrict which signature algorithm may be used to validate a SAML assertion, allowing the algorithm to be influenc...

WordPress SAML Single Sign On – SSO Login plugin <= 5.4.6 - Unauthenticated Authentication Bypass vulnerability

Unauthenticated Authentication Bypass vulnerability discovered by Tanishq Shah, Thatchapol Booranatanit AliceZz in WordPress Plugin SAML SP Single Sign On versions = 5.4.6...

CVE-2026-77998: Authorization Bypass Through User-Controlled Key

Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO 11.0.2, SAML SP Single Sign On – Login with ADFS 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps 6.4 - This is due to the mosamlvalidatesignature function...

VulnCheck KEV: CVE-2026-61979

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-61979

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-61979 WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-61979

The Xecurify miniOrange SAML 2.0 Single Sign On WordPress plugin (versions

CVE-2026-61979

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

EUVD-2026-57976

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-61979 WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by sequenceX0 in WordPress Plugin SAML SP Single Sign On versions = 5.4.3...

CVE-2026-61979: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

PT-2026-71542

Name of the Vulnerable Software and Affected Versions SAML SP Single Sign On versions prior to 5.4.4 Description An unauthenticated privilege escalation flaw allows attackers to sign in as any WordPress user, including administrators. Recommendations Update to a version newer than 5.4.3...

Linux Distros Unpatched Vulnerability : CVE-2026-49284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. Prior to 2.4.7 and 2.5.2, SimpleSAMLphp's SAML SP ACS path does not enforc...

CVE-2026-49284: Insufficient Verification of Data Authenticity

SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. Prior to 2.4.7 and 2.5.2, SimpleSAMLphp's SAML SP ACS path does not enforce the IdP selected for an SP-initiated login when unsigned Response/InResponseTo is combined with a signed assertion lacking...