CVE-2026-14917

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" Run python cve-2022-23131.py https://www.example.com Admin Use the exp to generate signedsession, replace the cookie, then click Sign in with Single Sign-On SAML Default is Admin Act responsibly, you bear the consequences A chance encounter, a...