cve-2022-23131

cve-2022-23131 Modo de uso: python3 zabbix.py target Admin target es la dirección objetivo Admin es el nombre de usuario del administrador fijo Reemplace la zbxsignedsession generada en la cookie del objetivo actual Haga clic en 'Sign in with Single Sign-On SAML' en la página de inicio de sesión...

zabbix-cve-2022-23131

cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. Reemplace zbxsignedsession por cookie 2. Inicie sesión con Single Sign-On SAML autor: @random-robbie、@jweny y @Mr-xn enlace: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...

cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-sistema de monitoreo" && body="saml" Ejecución python cve-2022-23131.py https://www.example.com Admin Usa el exploit para generar signedsession, reemplaza la cookie, luego haz clic en Sign in with Single Sign-On SAML Por defecto es Admin Respeta los límites, las...

CVE-2022-47966-Scan

CVE-2022-47966 Scanner About CVE-2022-47966 is a critical unauthenticated remote code execution vulnerability affecting at least 24 on-premise ManageEngine products. The vulnerability applies only if SAML SSO is enabled. For some products it also applies if SAML SSO was previously enabled. Timeli...

CVE-2026-88907

The software TÜBİTAK ULAKBİM UlakPDF contains an Incorrect Authorization vulnerability that enables an Authentication Bypass . This issue is specifically linked to a SAML ePPN Attribute Validation Bypass . The vulnerability affects versions through 09092026 . The impact includes high levels of co...

CVE-2022-4361

CVE-2022-4361 Description This repository contains a PoC for CVE-2022-4361. All the credits go to original author of the discovery, mulliken; IMPORTANT : this PoC is not complete as it does not cover the case for the AssertionConsumerServiceURL value on the SAML authentication protocol. Currently...

CVE-2025-29775

SAMLStorm CVE-2025-29775 Lab Environment This is a lab environment for demonstrating the SAMLStorm vulnerability CVE-2025-29775 that affects the xml-crypto library and SAML implementations in Node.js. Note: This is not a true exploitation of the vulnerability, just a recreation to demonstrate how...

Zabbix-SAML-SSO-_CVE-2022-23131

This repository does not have a README...

CVE-2026-8451

🚨 CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. ✨ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...

CVE-2025-12101-checker

CVE-2025-12101-checker Simple Python PoC to check Citrix NetScaler ADC / Gateway instances for CVE-2025-12101 reflected XSS on /cgi/logout using a crafted SAMLResponse + RelayState payload. ⚠️ Use this tool only on systems you own or are explicitly authorized to test. 🔍 Background CVE-2025-12101...

WordPress SAML Single Sign On plugin < 6.0.0 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin SAML SP Single Sign On versions 6.0.0...

CVE-2026-46490-samlify-SAML-Attribute-Injection

CVE-2026-46490 — samlify SAML AttributeValue XML Injection → Privilege Escalation samlifyValue — is inserted unescaped , so a normal user can inject extra elements e.g. role=admin into their own, IdP-signed SAML assertion. Because the injection happens before signing, the Service Provider's...

CVE-2026-55210

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

CVE-2026-55210

Joplin Server prior to 3.7.2 contains a vulnerability in UserModel.ssoLogin() where the method returns an existing account matched by an IdP-asserted email without checking the is_external flag . In deployments using mixed local and SAML authentication , an attacker whose IdP session can assert a...

CVE-2026-55210 Joplin: SAML SSO account takeover via email-based account linking (missing is_external check in ssoLogin)

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's UserModel.ssoLogin returns an existing account matched by an IdP-asserted email without checking the account's isexternal flag. In deployments using mixed loca...

cve-2022-23131

cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. reemplaza zbxsignedsession por cookie 2. inicia sesión con Single Sign-On SAML autor: @random-robbie、@jweny y @Mr-xn link: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 - SAML SSO bypass root@kitploit: fofa: app="ZABBIX-监控系统" && body="saml"...

netscaler-saml-memory-disclosure-security-assessment

CVE-2026-8451 - Sobrellectura de Memoria SAML en Citrix NetScaler CitrixBleed Informe de Ciberseguridad en Estilo Consultor Informe profesional de evaluación de vulnerabilidades sobre el riesgo de divulgación de memoria SAML en NetScaler, que incluye impacto técnico, remediación y estrategia de...

CVE-2022-47966_checker

CVE-2022-47966checker Quick and dirty powershell script to look for ManageEngine CVE-2022-47966 IOCs. The script will parse requests in ME HTTP access logs. If a characteristic SAML request is found, it will attempt to decode and extract the attacker's payload. Findings are written to...

CVE-2026-60206

🚨 CVE-2026-60206 — Toma de control de WebLogic mediante SAML Vulnerabilidad de autenticación SAML de Oracle WebLogic Server Un análisis técnico del CVE-2026-60206 que afecta a Oracle WebLogic Server. 📖 Resumen CVE-2026-60206 es una vulnerabilidad Crítica CVSS 9.9 que afecta a Oracle WebLogic...