CVE-2022-47966

CVE-2022-47966 POC for CVE-2022-47966 affecting the following ManageEngine products: Access Manager Plus Active Directory 360 ADAudit Plus ADManager Plus ADSelfService Plus Analytics Plus Application Control Plus Asset Explorer Browser Security Plus Device Control Plus Endpoint Central Endpoint...

SAMLRaider

SAML Raider - SAML2 Burp Extension Description SAML Raider is a Burp Suite extension for testing SAML infrastructures. It contains two core functionalities: Manipulating SAML Messages and manage X.509 certificates. This software was created by Roland Bischofberger and Emanuel Duss during a bachel...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 - SAML SSO bypass fofa: app="ZABBIX-监控系统" && body="saml"...

CVE-2022-26138

CVE-2022-26138 CVE-2022-23131 - SAML SSO bypass fofa: iconhash="-305179312"...

cve-2022-23131

cve-2022-23131 cve-2022-23131 zabbix-saml-bypass-exp 1. replace zbxsignedsession to cookie 2. sign in with Single Sign-On SAML author: @random-robbie、@jweny and @Mr-xn link: https://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage...

ruby-saml

Ruby SAML Minor and patch versions of Ruby SAML may introduce breaking changes. Please read UPGRADING.md for guidance on upgrading to new Ruby SAML versions. Vulnerability Notice CVE-2025-66568 and CVE-2025-66567. affects version ruby-saml 1.18.0 including 1.12.4, upgrade to 1.18.1 CVE-2025-54572...

CVE-2024-21893.py

CVE-2024-21893 is server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication. run python CVE-2024-21893.py -u...

CVE-2022-47966_checker

CVE-2022-47966checker Quick and dirty powershell script to look for ManageEngine CVE-2022-47966 IOCs. The script will parse requests in ME HTTP access logs. If a characteristic SAML request is found, it will attempt to decode and extract the attacker's payload. Findings are written to...

shimit

shimit shimit is a python tool that implements the Golden SAML attack. More informations on this can be found in the following article on our blog. python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity SESSIONVALIDITY --SamlValidity...

CVE-2017-11427-DEMO

CVE-2017-11427-DEMO Basic Environment $ sudo apt-get install libxml2-dev libxslt1-dev $ sudo apt-get install libxml2-dev libxmlsec1-dev libxmlsec1-openssl DEMO: $ git clone https://github.com/CHYbeta/CVE-2017-11427-DEMO.git $ cd CVE-2017-11427-DEMO $ source venv/bin/active $ cd vulnsaml $ python...

EUVD-2026-106328

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SAML to compromise Oracle...

EUVD-2026-106325

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SAML to compromise Oracle...

CVE-2026-87251

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via SAML to compromise Oracle...

CVE-2026-87251

The Oracle Access Manager product of Oracle Fusion Middleware is affected by a vulnerability in the Authentication Engine component. This issue impacts versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via SAML can easily exploit this vulnerability to compromise...

CVE-2026-83409

A vulnerability exists in the Oracle Access Manager product (component: Authentication Engine ) within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via SAML to compromise the pro...

CVE-2026-3055

CVE-2026-3055 - Security Vulnerability Severity: N/A CVSS: N/A Impact: N/A Published: 2026-03-23 Legal For authorized security testing only. Root Cause short version Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread...

CVE-2026-15013

CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 Auth Bypass PoC Proof-of-concept for CVE-2026-15013 : unauthenticated authentication bypass via SAML Signature Algorithm Confusion HMAC-SHA1 in the miniOrange SAML Single Sign On – SSO Login WordPress plugin versions up to and including 5.4.3. Authoriz...

CVE-2026-8451

🚨 CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. ✨ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...

SCTT-2026-33-0004-FortiCloud-SSO-Identity-Singularity

SCTT-2026-33-0004: FortiCloud SSO Identity Singularity This is the full implementation of the SCTT-0004 vector. 📡 Technical Analysis While Fortinet's January 27, 2026 mitigation for CVE-2026-24858 focuses on blocking specific accounts like [email protected], it fails to address the Temporal...

CVE-2025-12101-checker

CVE-2025-12101-checker Simple Python PoC to check Citrix NetScaler ADC / Gateway instances for CVE-2025-12101 reflected XSS on /cgi/logout using a crafted SAMLResponse + RelayState payload. ⚠️ Use this tool only on systems you own or are explicitly authorized to test. 🔍 Background CVE-2025-12101...