2548 matches found
CVE-2022-23131
CVE-2022-23131 CVE-2022-23131 - bypass de SAML SSO fofa: app="ZABBIX-็ๆง็ณป็ป" && body="saml"...
authelia
!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...
teleport
Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...
OpenAM
Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements, and Web Services Security. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 & OpenID Connect ensure that OpenAM integrates easily with legacy, custom, a...
-CVE-2022-22954-scanner
CVE-2022-22954-scanner Vulnerability Introduction VMware Workspace ONE Access formerly VMware Identity Manager enables employees to accelerate access to SaaS, web, and native mobile applications through multi-factor authentication, conditional access, and single sign-on. Affected versions: VMware...
sap_logon_ticket
saplogonticket General toolkit related to SAP's SSO mechanism : the Logon Tickets...
CVE-2026-24858
CVE-2026-24858 Vulnerability Analysis Report Full Version with Sources Fortinet FortiCloud SSO Authentication Bypass Vulnerability Document Version : 2.0 Full Source Attribution Version Last Updated : January 29, 2026 Purpose : Security Audit, Technical Documentation, Incident Response ๐ Table of...
cve-2022-23131
cve-2022-23131 FOFA app="ZABBIX-็ๆง็ณป็ป" && body="saml" Run python cve-2022-23131.py https://www.example.com Admin Use the exp to generate signedsession, replace the cookie, then click Sign in with Single Sign-On SAML Default is Admin Act responsibly, you bear the consequences A chance encounter, a...
CVE-2022-23131
CVE-2022-23131 Zabbix SSO Vulnerability Just like other POCs on GitHub, there is an issue with SSO authentication, and most environments fail during testing. Try it manually yourself...
CVE-2026-97274
Unauthenticated Bypass Vulnerability in OAuth Single Sign On โ SSO OAuth Client = 7.1.2 versions...
CVE-2026-97274
The WordPress OAuth Single Sign On โ SSO (OAuth Client) plugin, versions
CVE-2026-97274 WordPress OAuth Single Sign On โ SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability
Unauthenticated Bypass Vulnerability in OAuth Single Sign On โ SSO OAuth Client = 7.1.2 versions...
EUVD-2026-89923
Unauthenticated Bypass Vulnerability in OAuth Single Sign On โ SSO OAuth Client = 7.1.2 versions...
PT-2026-98032
Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.7 authentik versions prior to 2026.5.7 authentik versions prior to 2026.8.2 Description During an authentication or enrollment flow, the email authenticator accepts a recipient address provided in the setup...
CVE-2026-82843
The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...
CVE-2026-82843 WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitution
The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...
CVE-2026-82843 WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitution
The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...
CVE-2026-82843
The WP OAuth Server (Login with WordPress) WordPress plugin, in versions before 6.4.0 , is vulnerable to a cross-user account takeover due to an improper authentication flaw. The plugin fails to bind the issued OpenID Connect identity assertion to the specific authorization grant being exchanged....
CVE-2026-82843: Improper Authentication
The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...
PT-2026-97505
Name of the Vulnerable Software and Affected Versions Imprivata EAM versions prior to 26.2.7 Description The software lacks a mechanism to rotate the RSA key pair used for generating X.509 certificates after deployment. This means the key pair remains permanent once the system is deployed, which...