Poc-CVE-2024-32962-xml-crypto

Poc-CVE-2024-32962-xml-crypto 针对 CVE-2024-32962 漏洞的攻击模拟，用于伪造 SAML 消息并获取未经授权的权限。 即将发布。 Poc...

CVE-2024-45409

Ruby-SAML / GitLab 认证绕过 CVE-2024-45409 漏洞利用 该脚本利用了 CVE-2024-45409 漏洞，允许未经身份验证的攻击者访问 IDP 签发的任何 SAML 文档，从而伪造 SAML 响应/断言，并以任意用户身份登录 GitLab。 以下 GitLab（CE/EE）版本均受影响： 您正在被 重定向。 参考 https://about.gitlab.com/releases/2024/09/17/patch-release-gitlab-17-3-3-released/ https://github.com/advisories/GHSA-j...

CVE-2026-75807 SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning

The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.4.6. This is due to the mosamlloginvalidate ACS handler persisting the X.509 certificate extracted from an incoming SAMLResponse into the mosamlrequiredcertificate...

PT-2026-83496

Name of the Vulnerable Software and Affected Versions SAML Single Sign On – SSO Login plugin for WordPress versions prior to 5.4.7 Description An authentication bypass exists due to the mo saml login validate ACS handler persisting the X.509 certificate extracted from an incoming SAMLResponse int...

CVE-2026-55789

Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, Logto's self-hosted SAML application IdP built the signed SAML response and assertion by string-substituting user-controlled profile attributes such as name, email, and custom attribute-mapping values into...