shimit

shimit shimit è uno strumento Python che implementa l'attacco Golden SAML. Maggiori informazioni possono essere trovate nel seguente articolo sul nostro blog. python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity SESSIONVALIDITY...

CVE-2026-60206

CVE-2026-60206 – PoC zur Umgehung der SAML-Authentifizierung von Oracle WebLogic Server Dieses Repository bietet einen Proof-of-Concept-Exploit für CVE‑2026‑60206 , eine kritische Schwachstelle zur Umgehung der Authentifizierung in der SAML-Implementierung von Oracle WebLogic Server. Der Fehler...

POC-CVE-2026-60206

CVE-2026-60206 — Oracle WebLogic SAML-Authentifizierungsumgehung CVSS 9.9 — SAML-Authentifizierungsumgehung im Oracle WebLogic Server Core. Betroffen: 12.2.1.4.0 14.1.1.0.0 14.1.2.0.0 15.1.1.0.0 ⚠️ Nur autorisierte Sicherheitstests. Installation git clone...

CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos o retorno seguro de todos os cidadãos que foram feitos reféns pelo grupo terrorista Hamas. Não descansaremos até que todos os reféns sejam libertados e voltem para casa em segurança. Você pode ajudar a trazê-los de...

CVE-2022-23131

CVE-2022-23131 Exploit de Autenticação SAML do Zabbix Este script Python explora um fluxo de autenticação SAML mal configurado em um servidor Zabbix. Ao fornecer uma URL do servidor Zabbix e um usuário padrão: Admin, o script gera uma sessão Zabbix autenticada zbxsession e tenta acessar o painel...

CVE-2026-19490-check

Citrix NetScaler SAML nFactor Context Authentication Bypass — Skript zur Erkennung der Schwachstelle Ein sicherer, unauthentifizierter Schwachstellen-Check für CVE-2026-19490 , die Pre-Authentication- Authentication-Bypass in dem SAML-Service-Provider-Pfad von Citrix NetScaler ADC / NetScaler...

CVE-2026-60206

🚨 CVE-2026-60206 — WebLogic SAML-Übernahme Oracle WebLogic Server SAML-Authentifizierungsschwachstelle Eine technische Analyse von CVE-2026-60206, die Oracle WebLogic Server betrifft. 📖 Überblick CVE-2026-60206 ist eine kritische CVSS 9.9 Schwachstelle, die Oracle WebLogic Server betrifft. Laut...

CVE-2026-23933

A flaw was found in Zabbix. The cryptographic key used for signing Frontend sessions was erroneously written to the database seed. In deployments that utilize both SAML authentication and guest users, an attacker could use this key to forge valid session cookies. This could potentially lead to...

CVE-2026-55210: Authentication Bypass by Spoofing

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

USN-8770-1: SimpleSAMLphp vulnerabilities

It was discovered that SimpleSAMLphp incorrectly validated cryptographic signatures in XML messages. An authenticated attacker could possibly use this issue to impersonate users or gain elevated privileges. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2019-3465 It was...

PT-2026-93223

Name of the Vulnerable Software and Affected Versions Secret Server affected versions not specified Description Under certain conditions, a valid SAML IdP response may be used to impersonate another user. SAML Security Assertion Markup Language is an XML-based standard for exchanging authenticati...

GHSA-H8M9-JGF8-VWVP Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

SAML Tenant Binding Enables Cross-Tenant Account Takeover Summary Prowler's SAML authentication flow trusted the email domain asserted in a SAMLResponse when deciding which tenant should receive the final token. A malicious tenant with its own SAML configuration and a self-controlled IdP could...

HPESBMU05142 rev.1 - HPE IceWall products, Remote Bypass of Security Restrictions

Potential Security Impact: Remote: Bypass Security Restrictions SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall MFA 4.0 Enterprise Edition - SAML Authentication Option RHEL7, RHEL8, RHEL9, RHEL10, Windows IceWall MFA 4.0 Standard Edition - SAML Authentication Option RHEL7,...

DRUPAL-CONTRIB-2026-143

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The miniorange\saml module does not sufficiently validate certain user-supplied URLs before performing redirects. An attacker could cause users...

CVE-2026-86770

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allowing attackers to authenticate as different users by registering IdP accounts with accent or case variants of victim usernames. Attackers can exploit the default utf8mb4unicodeci database collation t...

EUVD-2026-74947

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allowing attackers to authenticate as different users by registering IdP accounts with accent or case variants of victim usernames. Attackers can exploit the default utf8mb4unicodeci database collation t...

CVE-2026-86770 Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation

Snipe-IT before 8.7.0 fails to validate username case sensitivity during SAML authentication, allowing attackers to authenticate as different users by registering IdP accounts with accent or case variants of victim usernames. Attackers can exploit the default utf8mb4unicodeci database collation t...

CVE-2026-56207 Apache Impala: SAML authentication bypass via forged bearer token

Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user. This issue affects Apache Impala: =4.0.0. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

CVE-2026-56207 Apache Impala: SAML authentication bypass via forged bearer token

Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user. This issue affects Apache Impala: =4.0.0. Users are recommended to upgrade to version 4.5.2, which fixes this issue...

PT-2026-89242

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The miniorange saml module does not correctly restrict access to certain functionality intended for administrative use. This could allow...