cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-sistema de monitoreo" && body="saml" Ejecución python cve-2022-23131.py https://www.example.com Admin Usa el exploit para generar signedsession, reemplaza la cookie, luego haz clic en Sign in with Single Sign-On SAML Por defecto es Admin Respeta los límites, las...

CVE-2026-14917

A SAML authentication bypass vulnerability affects the Kong SAML plugin when the validateassertionsignature option is explicitly set to false. This option is enabled by default. When disabled, the plugin may extract the SAML identity from an unsigned assertion and authenticate the user without...

CVE-2026-23933 Hardcoded session key in Zabbix 7.4

In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation scenario is for deployments that utilize both - SAML authentication and guest users. In such cases the key can be used to forge valid...

CVE-2026-23933 Hardcoded session key in Zabbix 7.4

In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation scenario is for deployments that utilize both - SAML authentication and guest users. In such cases the key can be used to forge valid...

CVE-2026-23933

In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation scenario is for deployments that utilize both - SAML authentication and guest users. In such cases the key can be used to forge valid...

CVE-2022-39183

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors...

Open redirect

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors...

CVE-2022-39183

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors...

CVE-2022-39183 Moodle Plugin - SAML Auth Open Redirect

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors...

CVE-2022-39183 Moodle Plugin - SAML Auth Open Redirect

Moodle Plugin - SAML Auth may allow Open Redirect through unspecified vectors...

PT-2023-13706 · Moodle · Moodle Plugin - Saml Auth

Name of the Vulnerable Software and Affected Versions: Moodle Plugin - SAML Auth affected versions not specified Description: The issue may allow Open Redirect through unspecified vectors. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2022-39183

The CVE-2022-39183 entry concerns the Moodle Plugin - SAML Auth, with an Open Redirect flaw exploitable via unspecified vectors. Public documents consistently describe this as an Open Redirect issue affecting the Moodle SAML Auth plugin, but do not provide concrete product version ranges or vendo...

Fedora 25 : mrbs (2017-b5bcfedf10)

Changes since MRBS 1.6.1 : - Fixed a number of security issues in MRBS that were disclosed to the project by SySS GmbH, including XSS, CSRF protection and session fixation. - Improved behaviour of browser caching in MRBS. - Improved localisation, especially the use of colons in labels. - Added ne...