authelia

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

CVE-2026-62126

Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-20-single-sign-on allows HTTP DoS.This issue affects SAML SP Single Sign On: from n/a through 6.1.0...

CVE-2026-62126

The miniOrange SAML SP Single Sign On WordPress plugin (versions

CVE-2026-62126 WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability

Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-20-single-sign-on allows HTTP DoS.This issue affects SAML SP Single Sign On: from n/a through 6.1.0...

EUVD-2026-116774

Allocation of Resources Without Limits or Throttling vulnerability in miniOrange SAML SP Single Sign On miniorange-saml-20-single-sign-on allows HTTP DoS.This issue affects SAML SP Single Sign On: from n/a through 6.1.0...

WordPress SAML SP Single Sign On plugin <= 6.1.0 - Denial of Service Attack vulnerability

Denial of Service Attack vulnerability discovered by Jens Friess in WordPress Plugin SAML SP Single Sign On versions = 6.1.0...

VulnCheck KEV: CVE-2026-19842

The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticat...

-CVE-2022-22954-scanner

CVE-2022-22954-scanner Vulnerability Introduction VMware Workspace ONE Access formerly VMware Identity Manager enables employees to accelerate access to SaaS, web, and native mobile applications through multi-factor authentication, conditional access, and single sign-on. Affected versions: VMware...

cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" Run python cve-2022-23131.py https://www.example.com Admin Use the exp to generate signedsession, replace the cookie, then click Sign in with Single Sign-On SAML Default is Admin Act responsibly, you bear the consequences A chance encounter, a...

OpenAM

Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements, and Web Services Security. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 & OpenID Connect ensure that OpenAM integrates easily with legacy, custom, a...

teleport

Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 - SAML SSO bypass fofa: app="ZABBIX-监控系统" && body="saml"...

sap_logon_ticket

saplogonticket General toolkit related to SAP's SSO mechanism : the Logon Tickets...

CVE-2022-23131

CVE-2022-23131 Zabbix SSO Vulnerability Just like other POCs on GitHub, there is an issue with SSO authentication, and most environments fail during testing. Try it manually yourself...

CVE-2026-24858

CVE-2026-24858 Vulnerability Analysis Report Full Version with Sources Fortinet FortiCloud SSO Authentication Bypass Vulnerability Document Version : 2.0 Full Source Attribution Version Last Updated : January 29, 2026 Purpose : Security Audit, Technical Documentation, Incident Response 📋 Table of...

OrionLink: Single Sign-On with Oblivious Identity Brokers

Single Sign-On SSO is a federated authentication mechanism that improves user experience by enabling access to multiple services, or Relying Parties RPs, through a single authentication at an Identity Provider IdP. To reduce integration complexity, many RPs rely on third-party Identity Brokers...

CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On SSO setup for customer accounts, the system did not properly validate the responsetype requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to onl...

EUVD-2026-111998

When pretix is used as the identity provider in a Single-Sign-On SSO setup for customer accounts, the system did not properly validate the responsetype requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to onl...

CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On SSO setup for customer accounts, the system did not properly validate the "responsetype" requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to...

CVE-2026-101274

When pretix is used as the identity provider in a Single-Sign-On SSO setup for customer accounts, the system did not properly validate the responsetype requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to onl...