Lucene search
+L

3861 matches found

Nuclei
Nuclei
added yesterday94 views

Keycloak - SAML Core Package Signature Validation Flaw

A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Referen...

7.7CVSS6.5AI score0.0203EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2 days ago28 views

CVE-2026-67328 @better-auth/sso before 1.6.21 Account Takeover via SSO

@better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users. Attackers can exploit domain verification parsing mismatches, orphaned provider accounts, unbound SAML assertions, or reflect...

8.6CVSS0.00278EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2 days ago239 views

Apache CloudStack - SAML Signature Exclusion

The CloudStack SAML authentication disabled by default does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response...

8.1CVSS7.7AI score0.1776EPSS
SaveExploits1References5
NVD
NVD
added 3 days ago7 views

CVE-2026-18217

A flaw was found in the SAML protocol implementation of Keycloak, an open-source identity and access management solution. The issue occurs when Keycloak handles SAML authentication requests using the HTTP-Redirect binding. If a client is configured with a wildcard redirect URL, an attacker can...

3.4CVSS0.00193EPSS
SaveExploits0References2
CVE
CVE
added 3 days ago10 views

CVE-2026-18217

The CVE describes a flaw in Keycloak’s SAML protocol handling with HTTP-Redirect binding. If a client uses a wildcard redirect URL, an attacker can craft a request with malicious parameters, and during user authentication Keycloak may append its legitimate response to the attacker’s parameters. T...

3.4CVSS5.5AI score0.00193EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 4 days ago5 views

SUSE CVE-2026-55671

ZITADEL is an open source identity management platform. From 4.0.0-rc.1 through 4.15.1, ZITADEL's HTTP notification channels, OIDC BackChannel Logout, and SAML metadata URL fetches do not consistently validate user-defined URLs against protected denylist handling, allowing server-side requests to...

2.3CVSS7.7AI score0.00252EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago34 views

CVE-2026-28323 SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability

SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled...

9.8CVSS0.00638EPSS
SaveExploits0References3
EUVD
EUVD
added 4 days ago11 views

EUVD-2026-51182

SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled...

9.8CVSS5.8AI score0.00638EPSS
SaveExploits0References3
CVE
CVE
added 4 days ago34 views

CVE-2026-58066

Rocket.Chat SAML SSO prior to versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8 and 7.10.14 verify XML signatures but do not bind the validated signature to samlp:Response / saml:Assertion. An attacker could submit a wrapped document carrying forged identity attributes alongside a v...

9.8CVSS7.3AI score0.00209EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 6 days ago8 views

Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.

Summary Poweradmin v4.3.2 uses the attacker-controlled HTTPHOST request header as the authoritative source for building callback URLs in its OIDC, SAML, and logout authentication flows without any validation. An unauthenticated attacker can poison the redirecturi sent to the Identity Provider,...

9.6CVSS5.9AI score0.00312EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 6 days ago9 views

CVE-2026-7521

Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to verify file deletion path which allows an admin with SAML system-console write permissions to delete arbitrary files outside the config directory from the server via the remove file endpoint...

5.5CVSS0.00283EPSS
SaveExploits0References1
CVE
CVE
added 6 days ago13 views

CVE-2026-7521

Mattermost CVE-2026-7521 affects versions 11.8.x up to 11.8.0, 11.7.x up to 11.7.3, 11.6.x up to 11.6.5, and 10.11.x up to 10.11.20. The issue arises from a failure to verify the file deletion path in the remove file endpoint for SAML admin writes, enabling deletion of arbitrary files outside the...

5.5CVSS5.9AI score0.00283EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 6 days ago7 views

CVE-2026-7521

Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to verify file deletion path which allows an admin with SAML system-console write permissions to delete arbitrary files outside the config directory from the server via the remove file endpoint...

5.5CVSS5.9AI score0.00283EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 6 days ago6 views

EUVD-2026-49852

Mattermost versions 11.8.x = 11.8.0, 11.7.x = 11.7.3, 11.6.x = 11.6.5, 10.11.x = 10.11.20 fail to verify file deletion path which allows an admin with SAML system-console write permissions to delete arbitrary files outside the config directory from the server via the remove file endpoint...

5.5CVSS5.9AI score0.00283EPSS
SaveExploits0References1
Nuclei
Nuclei
added 2026/07/27 4:16 a.m.348 views

Ivanti Connect Secure - XXE

Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. id: CVE-2024-22024 info: name: Ivanti Connect Secure - XXE author: watchTowr severity: high description: | Ivanti Connect Secure is vulnerable to XXE XML External Entity injection. impact: | Successful exploitation of this...

8.3CVSS7.3AI score0.94721EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/07/27 4:16 a.m.52 views

SolarWinds Web Help Desk - Authentication Bypass

SolarWinds Web Help Desk 12.8.8 HF1 and earlier contains an authentication bypass vulnerability in the WebObjects session handling. By crafting a request with a manipulated path component to an internal admin page endpoint, an unauthenticated attacker can access privileged administrative function...

9.8CVSS7.4AI score0.83622EPSS
SaveExploits5References4
Cvelist
Cvelist
added 2026/07/23 8:33 p.m.33 views

CVE-2026-15981 SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.4.4. This is due to the mosamlvalidatesignature function performing a loose boolean check on the raw tri-state integer returned by PHP's opensslverify, causing a...

9.8CVSS0.00547EPSS
SaveExploits1References7
OSV
OSV
added 2026/07/23 3:43 p.m.7 views

CVE-2026-15615 SAML <Conditions> element not validated

Logto omits validation of the SAML element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely...

7.5CVSS5.3AI score0.00182EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:0 a.m.87 views

Oracle WebLogic Server (July 2026 CPU)

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core...

9.9CVSS7.2AI score0.00691EPSS
SaveExploits1References17
NVD
NVD
added 2026/07/21 10:17 p.m.7 views

CVE-2026-60206

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SAML to compromise...

9.9CVSS0.00486EPSS
SaveExploits1References1
Rows per page
Query Builder