flask-saml2

flask-saml2 .. note:: Recherche de mainteneurs. Ce projet n'est plus maintenu. La bibliothèque fonctionne, ou fonctionnait lors de ma dernière utilisation, mais je ne travaille plus sur le projet pour lequel elle avait été créée. Si vous souhaitez reprendre la direction et la maintenance de ce...

authentik

Что такое authentik? authentik — это провайдер удостоверений с открытым исходным кодом Identity Provider, IdP для современных систем единого входа SSO. Он поддерживает SAML, OAuth2/OIDC, LDAP, RADIUS и другие протоколы и предназначен для самостоятельного размещения — от небольших лабораторий до...

Blitz Identity Provider (Authentication server)

...

shimit

shimit shimit is a python tool that implements the Golden SAML attack. More informations on this can be found in the following article on our blog. root@kitploit: python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity SESSIONVALIDITY...

Shibboleth OIDC OP <3.0.4 - Server-Side Request Forgery

The Shibboleth Identity Provider OIDC OP plugin before 3.0.4 is vulnerable to server-side request forgery SSRF due to insufficient restriction of the requesturi parameter, which allows attackers to interact with arbitrary third-party HTTP services. id: CVE-2022-24129 info: name: Shibboleth OIDC O...

CVE-2026-3055

🔥 NetScalerBleed2: критическое чтение памяти без аутентификации в Citrix NetScaler CVE-2026-3055 Неаутентифицированное чтение памяти за пределами буфера утечка памяти Только на устройствах, настроенных как SAML-провайдер идентификации IdP 📋 Обзор CVE-2026-3055 — это критическая уязвимость чтения ...

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a27fa46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user...

EUVD-2026-70134

Jenkins SAML Plugin 4.618.v441a27fa46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user...

CVE-2026-84668

Jenkins SAML Plugin 4.618.v441a27fa46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user...

CVE-2026-84668

Jenkins SAML Plugin (versions 4.618.v441a_27fa_46d2 and earlier) is vulnerable to improper access control via Stapler data binding. The plugin's @DataBoundConstructor-annotated constructor writes the SAML identity provider metadata file to the Jenkins controller file system without checking for t...

CVE-2023-34362

CVE-2023-34362 PoC для CVE-2023-34362, затрагивающего MOVEit Transfer Технический анализ Технический анализ первопричины уязвимости можно найти в блоге: Краткое описание Данный PoC использует SQL-инъекцию для получения токена доступа API системного администратора, а затем использует этот доступ д...

check-cve-2026-3055-netscaler

CVE-2026-3055 NetScaler SAML IdP 점검 Citrix NetScaler / NetScaler Gateway 어플라이언스에서 CVE-2026-3055SAML ID 공급자 로 동작할 때 발생하는 메모리 초과 읽기를 탐지하기 위한 Python 헬퍼입니다. 탐지 로직은 watchTowr Labs의 공개 분석 문서와 일치합니다. 사전 요구 사항 Python 3.10+ SAML IdP로 구성된 어플라이언스에만 적용됩니다. 해당 역할이 없는 게이트웨이는 일반적으로 /saml/login에서 404를 반환합니다. 이는 ...

CVE-2026-82968

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

EUVD-2026-69800

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

CVE-2026-82968

Keycloak identity management service has a flaw in the first-broker-login flow that enables account takeover via social identity provider linking. The verification proof (described in the CVE list as a cross-session email verification proof ) is not strictly bound to the specific upstream identit...

CVE-2026-82968

A flaw was found in the first-broker-login flow of the Keycloak identity management service. When a user links a social identity provider account to their local account, the verification proof generated is not strictly bound to the specific upstream identity being verified. This allows an attacke...

PT-2026-84791

Name of the Vulnerable Software and Affected Versions Jenkins SAML Plugin versions prior to 4.618.v441a 27fa 46d2 Description Improper access control allows authenticated users to overwrite the SAML identity provider metadata file via Stapler data binding. This enables an attacker to replace the...

BIT-KEYCLOAK-2026-18201 Keycloak-services: keycloak-services: generic identity-provider creation can bind brokers to organizations without manage-organizations

Keycloak provides a way to manage identity providers and organizations through its administrative API. A flaw was discovered where an administrator with permission to manage identity providers could link a new provider to an organization without having the required permissions to manage that...

EUVD-2026-28857

Kargo has Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter...

CVE-2026-80192 better-auth SSO before 1.6.27 Domain Ownership Authentication Bypass

@better-auth/sso before 1.6.27 and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line contains two domain-ownership flaws. When domain verification is disabled, automatic organization assignment accepts unverified provider domains, allowing an authenticated organizati...