61 matches found
CVE-2020-35682
CVE-2020-35682 SD-91948: CVE-2020-35682: ServiceDesk Plus 中 SAML 登录期间的身份验证绕过漏洞。（如 ManageEngine 所述）。如果目标 ServiceDesk Plus 11134 安装已启用 SAML 登录，并且您拥有低权限用户的凭据，则可以将权限提升为管理员并获得 RCE。 我决定发布此概念验证（POC），因为既没有公开的利用程序，也没有太多关于该漏洞利用的描述。代码虽然有些混乱，但可以工作。 安装 root@kitploit: git clone...
CVE-2026-86770
Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication. Due to the default utf8mb4_unicode_ci database collation, an attacker who registers IdP accounts with accent or case variants of a victim's username can bypass username matching and achieve account takeo...
CVE-2026-33920
A cross-site request forgery vulnerability was discovered in the login functionality both standard and SAML due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performe...
CVE-2026-49381
JetBrains TeamCity prior to version 2026.1 is affected by a stored cross-site scripting (XSS) vulnerability on the SAML login page. The issue allows an attacker to inject content that could be rendered in the victim’s browser, with the CVSS basis indicating UI interaction is required and privileg...
CVE-2026-49381
In JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible...
PT-2026-33977
An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page...
CVE-2022-0903
A call stack overflow bug in the SAML login feature in Mattermost server in versions up to and including 6.3.2 allows an attacker to crash the server via submitting a maliciously crafted POST body...
Insertion of Sensitive Information Into Sent Data
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data in the oidc/saml login flows. An attacker can access sensitive information by sending crafted requests to the exposed interface. Remediation Upgrade...
EUVD-2020-21955
Malware in sbrugna...
EUVD-2020-23341
Malware in sbrugna...
EUVD-2018-7769
Malware in sbrugna...
EUVD-2022-15935
Malicious code in bioql PyPI...
EUVD-2021-28168
Malicious code in bioql PyPI...
Mattermost Server 10.5.x < 10.5.10 / 10.9.x < 10.9.5 / 10.10.x < 10.10.2 / 10.11.0 URL Redirection (MMSA-2025-00509)
The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2025-00509 advisory. - Mattermost versions 10.10.x = 10.10.1, 10.5.x = 10.5.9, 10.9.x = 10.9.4 fail to validate the redirectto parameter, allowing an attacker to craft a maliciou...
Mattermost Open Redirect vulnerability
Mattermost versions 10.10.x = 10.10.1, 10.5.x = 10.5.9, 10.9.x = 10.9.4 fail to validate the redirectto parameter, allowing an attacker to craft a malicious link that, once a user authenticates with their SAML provider, could post the user’s cookies to an attacker-controlled URL...
CVE-2025-9072
Mattermost versions 10.10.x = 10.10.1, 10.5.x = 10.5.9, 10.9.x = 10.9.4 fail to validate the redirectto parameter, allowing an attacker to craft a malicious link that, once a user authenticates with their SAML provider, could post the user’s cookies to an attacker-controlled URL...
PT-2025-37468
Name of the Vulnerable Software and Affected Versions Mattermost versions 10.5.0 through 10.5.9 Mattermost versions 10.9.0 through 10.9.4 Mattermost versions 10.10.0 through 10.10.1 Description Mattermost fails to validate the redirect to parameter, potentially allowing an attacker to craft a...
CVE-2023-1965
An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access toke...
CVE-2021-41015
A improper neutralization of input during web page generation 'cross-site scripting' in Fortinet FortiWeb version 6.4.1 and below, 6.3.15 and below allows attacker to execute unauthorized code or commands via crafted HTTP requests to SAML login handler...