Blitz Identity Provider (Authentication server)

...

CVE-2026-3055

🔥 NetScalerBleed2: Sobrelectura crítica de memoria no autenticada en Citrix NetScaler CVE-2026-3055 Lectura de memoria fuera de límites no autenticada Fuga de memoria Solo en appliances configurados como Proveedor de identidad SAML IdP 📋 Descripción general CVE-2026-3055 es una vulnerabilidad...

flask-saml2

flask-saml2 .. note:: Buscando mantenedores. Este proyecto no está mantenido. La biblioteca funciona, o así era cuando la usé por última vez, pero ya no trabajo en el proyecto para el que se construyó. Si estás interesado en asumir el liderazgo y el mantenimiento de este proyecto, ponte en...

shimit

shimit shimit is a python tool that implements the Golden SAML attack. More informations on this can be found in the following article on our blog. python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity SESSIONVALIDITY --SamlValidity...

authentik

What is authentik? authentik is an open-source Identity Provider IdP for modern SSO. It supports SAML, OAuth2/OIDC, LDAP, RADIUS, and more, designed for self-hosting from small labs to large production clusters. Our enterprise offering is available for organizations to securely replace existing...

check-cve-2026-3055-netscaler

Comprobación de CVE-2026-3055 en SAML IdP de NetScaler Helper en Python para sondear appliances Citrix NetScaler / NetScaler Gateway en busca de CVE-2026-3055 sobrelectura de memoria al actuar como proveedor de identidad SAML. La lógica de detección coincide con el informe público de watchTowr...

CVE-2023-34362

CVE-2023-34362 POC para CVE-2023-34362 que afecta a MOVEit Transfer Análisis técnico Un análisis técnico de causa raíz de la vulnerabilidad se puede encontrar en el blog: Resumen Este POC explota una inyección SQL para obtener un token de acceso de API de sysadmin y luego utiliza ese acceso para...

Shibboleth OIDC OP <3.0.4 - Server-Side Request Forgery

The Shibboleth Identity Provider OIDC OP plugin before 3.0.4 is vulnerable to server-side request forgery SSRF due to insufficient restriction of the requesturi parameter, which allows attackers to interact with arbitrary third-party HTTP services. id: CVE-2022-24129 info: name: Shibboleth OIDC O...

CVE-2026-100288

Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to obtain external identity provider tokens and active session identifiers via direct inspection of stored records...

CVE-2026-100288

Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to obtain external identity provider tokens and active session identifiers via direct inspection of stored records...

CVE-2026-100288

Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to obtain external identity provider tokens and active session identifiers via direct inspection of stored records...

EUVD-2026-89025

Cleartext storage of sensitive information in the database in Devolutions Server 2026.3.5.0 and earlier allows an attacker with read access to the database to obtain external identity provider tokens and active session identifiers via direct inspection of stored records...

CVE-2026-100288

Devolutions Server version 2026.3.5.0 and earlier is vulnerable to a security flaw where sensitive information is stored in cleartext within the database. An attacker who gains read access to the database can perform a direct inspection of stored records to obtain external identity provider token...

EUVD-2026-88605

Bitwarden Server 2025.6.0 before 2026.5.0 declares the @ExternalId parameter of the UserReadBySsoUserOrganizationIdExternalId stored procedure as NVARCHAR50 while the column it queries stores NVARCHAR300, silently truncating the SSO login identifier on SQL Server deployments and allowing a user...

PT-2026-102338

Name of the Vulnerable Software and Affected Versions LiteLLM affected versions not specified Description A weak authentication issue exists in the JWT authentication flow. An attacker with a valid JSON Web Token JWT from the configured identity provider can authenticate as any existing user by...

CVE-2026-84458

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enabled, Zammad binds an incoming third-party SSO identity to an existing local account by matching the email address the identity provider reports,...

CVE-2026-94606

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik email authenticator enrollment during an authentication or enrollment flow accepts a recipient address supplied in the setup request instead of using the address already established by the flow. An...

CVE-2026-94611 authentik: Stored credentials are readable with view permission alone

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...

EUVD-2026-86277

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...

CVE-2026-94611 authentik: Stored credentials are readable with view permission alone

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, authentik API serializers return stored credentials when an account has view permission on an affected configuration, even when that account is not authorized to change the configuration or read its secrets...