Lucene search
+L

53 matches found

Kitploit
Kitploit
added 2026/09/03 8:38 p.m.3 views

flask-saml2

flask-saml2 .. note:: بحثاً عن مشرفين. هذا المشروع لم يعد قيد الصيانة. المكتبة تعمل، أو كانت تعمل عندما استخدمتها آخر مرة، لكنني لم أعد أعمل على المشروع الذي بُنيت من أجله. إذا كنت مهتماً بتولي قيادة هذا المشروع وصيانته، فيُرجى التواصل معي. .. image::...

5.9AI score
SaveExploits0References4
NVD
NVD
added 2026/09/02 4:17 p.m.5 views

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a27fa46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user...

8.8CVSS0.0026EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/02 3:40 p.m.7 views

EUVD-2026-70134

Jenkins SAML Plugin 4.618.v441a27fa46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user...

8.8CVSS5.9AI score0.0026EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/09/02 3:40 p.m.6 views

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a27fa46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user...

5.9AI score0.0026EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/02 3:40 p.m.32 views

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a27fa46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user...

0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/02 3:40 p.m.18 views

CVE-2026-84668

Jenkins SAML Plugin (versions 4.618.v441a_27fa_46d2 and earlier) is vulnerable to improper access control via Stapler data binding. The plugin's @DataBoundConstructor-annotated constructor writes the SAML identity provider metadata file to the Jenkins controller file system without checking for t...

8.8CVSS5.9AI score0.0026EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/09/02 12:00 a.m.10 views

PT-2026-84791

Name of the Vulnerable Software and Affected Versions Jenkins SAML Plugin versions prior to 4.618.v441a 27fa 46d2 Description Improper access control allows authenticated users to overwrite the SAML identity provider metadata file via Stapler data binding. This enables an attacker to replace the...

8.8CVSS5.9AI score0.0026EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/06/05 7:49 p.m.15 views

CVE-2026-49380

In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible...

6.1CVSS5.4AI score0.0017EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/06/04 12:00 a.m.20 views

JetBrains TeamCity < 2026.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2026.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection settings CVE-2026-49373 - In JetBrains TeamCity before 2026.1...

8.8CVSS6.4AI score0.27067EPSS
SaveExploits0References8
NVD
NVD
added 2026/05/29 7:16 p.m.32 views

CVE-2026-49376

In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin...

6.5CVSS0.00216EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/29 6:15 p.m.15 views

CVE-2026-49380

In JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible...

3.1CVSS5.8AI score0.0017EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/29 6:15 p.m.34 views

CVE-2026-49380

CVE-2026-49380 : In JetBrains TeamCity (before 2026.1), the SAML plugin allows an open redirect. Affected product: JetBrains TeamCity with the SAML plugin; root cause: improper redirection handling in the SAML plugin leading to open redirect. Impact: potential user redirection to arbitrary URL. R...

6.1CVSS5.8AI score0.0017EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/29 6:15 p.m.16 views

CVE-2026-49376

In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/29 6:15 p.m.42 views

CVE-2026-49376

CVE-2026-49376 affects JetBrains TeamCity prior to 2026.1 via the SAML plugin , where the root cause is insufficient username validation . The vulnerability is exploitable remotely over the network with low complexity and no privileges or user interaction required, and it has a confidentiality/ i...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/29 6:15 p.m.13 views

CVE-2026-49376

In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/29 6:15 p.m.52 views

CVE-2026-49376

In JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin...

6.5CVSS0.00216EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/05/29 12:00 a.m.37 views

PT-2026-44960

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1 Description An open redirect exists within the SAML plugin. An open redirect occurs when an application takes a user-supplied URL and redirects the user to it without sufficient validation, potential...

6.1CVSS5.8AI score0.0017EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.19 views

JetBrains TeamCity 输入验证错误漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools developed by the Czech company JetBrains. This tool offers features such as continuous unit testing, code quality analysis, and reporting on build issues. Prior to JetBrains TeamCity 2026.1, there was a...

6.1CVSS5.9AI score0.0017EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.19 views

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools developed by the Czech company JetBrains. This tool offers features such as continuous unit testing, code quality analysis, and reporting on build issues. Versions of JetBrains TeamCity prior to 2026.1...

6.5CVSS5.9AI score0.00216EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/30 2:13 p.m.11 views

CVE-2025-64131

Jenkins SAML Plugin 4.583.vc68232f7018a and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkins as that user...

7.5CVSS6.5AI score0.00441EPSS
SaveExploits0References1
Rows per page
Query Builder