CVE-2022-23131

CVE-2022-23131 Exploitation de l'authentification SAML de Zabbix Ce script Python exploite un flux d'authentification SAML mal configuré sur un serveur Zabbix. En fournissant l'URL d'un serveur Zabbix et un utilisateur par défaut : Admin, le script génère une session Zabbix authentifiée zbxsessio...

CVE-2024-41107

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我々は、テロ組織ハマスによって人質に取られたすべての市民の安全な帰還を要求します。すべての人質が解放され、無事に帰還するまで、我々は休むことはありません。あなたも彼らを家に連れ戻す手助けができます。https://stories.bringthemhomenow.net/ 🚀 CVE-2024-41107 エクスプロイト 🚀 このリポジトリには、Apache CloudStack の深刻な脆弱性 CVE-2024-41107 に対するエクスプロイトが含まれています。この脆弱性は、バージョン 4.5.0 から...

CVE-2026-60206

CVE-2026-60206 – Oracle WebLogic Server SAML 认证绕过 PoC 该仓库提供了针对 CVE-2026-60206 的概念验证利用代码，这是 Oracle WebLogic Server SAML 实现中的一个关键认证绕过漏洞。该漏洞允许远程低权限攻击者通过伪造 SAML 断言完全入侵服务器。 ⚠️ 免责声明： 本工具仅限授权的安全研究和测试 使用。仅可对您拥有或获得明确许可的系统进行测试。作者不对滥用行为承担任何责任。 🔥 漏洞概述 CVE-2026-60206 影响 Oracle WebLogic Server 的核心组件。该漏洞源于 SAML...

shimit

shimit shimit est un outil Python qui implémente l'attaque Golden SAML. Plus d'informations à ce sujet se trouvent dans l'article suivant sur notre blog. root@kitploit: python .\shimit.py -h usage: shimit.py -h -pk KEY -c CERT -sp SP -idp IDP -u USER -reg REGION --SessionValidity SESSIONVALIDITY...

CVE-2026-60206

🚨 CVE-2026-60206 — WebLogic SAML 接管 Oracle WebLogic Server SAML 身份验证漏洞 针对影响 Oracle WebLogic Server 的 CVE-2026-60206 的技术分析。 📖 概述 CVE-2026-60206 是一个影响 Oracle WebLogic Server 的 严重（CVSS 9.9） 漏洞。根据 Oracle 的说法，具有网络访问权限的低权限认证攻击者通过 SAML 可完全攻陷易受攻击的 WebLogic 实例。 ⚠️ 本仓库仅用于教育、防御和研究目的。 📊 漏洞详情 🎯 受影响版本 Oracle...

POC-CVE-2026-60206

CVE-2026-60206 — Contournement de l'authentification SAML Oracle WebLogic CVSS 9.9 — Contournement de l'authentification SAML dans Oracle WebLogic Server Core. Versions concernées : 12.2.1.4.0 14.1.1.0.0 14.1.2.0.0 15.1.1.0.0 ⚠️ Test de sécurité autorisé uniquement. Installation root@kitploit: git...

EUVD-2026-66222

Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect destinations. Attackers with IdP access can supply malicious RelayState values to redirect authenticated users to...

CVE-2026-80200

Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect destinations. Attackers with IdP access can supply malicious RelayState values to redirect authenticated users to...

CVE-2026-80200 Kimai before 2.53.0 Open Redirect via RelayState

Kimai before 2.53.0 contains an open redirect vulnerability in the SAML authentication success handler that accepts unvalidated RelayState POST parameters as redirect destinations. Attackers with IdP access can supply malicious RelayState values to redirect authenticated users to...

PT-2026-81913

Name of the Vulnerable Software and Affected Versions Kimai versions prior to 2.53.0 Description An open redirect issue exists in the SAML authentication success handler. The system accepts unvalidated RelayState POST parameters as redirect destinations, allowing attackers with Identity Provider...

CVE-2026-68745

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the...

CVE-2026-68745

Apache CloudStack versions 4.20.3.0 and 4.22.1.0 (all platforms) suffer from certificate validation failures in their SAML authentication flow. The root cause is that SAML2 signature validation is silently skipped when the Identity Provider (IdP) is configured without a certificate. This allows a...

EUVD-2026-63830

Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms allow a malicious agent to forge a SAML response to the management server. The agent will have to spoof the ip address of the IdP or get an url of its own choosing registered in the...

CVE-2026-23933

In Zabbix 7.4, the frontend session signing key was erroneously written to the database seed. When SAML authentication and guest users are both enabled, this key can be extracted and used to forge valid session cookies, enabling unauthorized access. CVSS 4.0 scores this HIGH (7.7). The Zabbix tic...

EUVD-2026-60737

In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation scenario is for deployments that utilize both - SAML authentication and guest users. In such cases the key can be used to forge valid...

PT-2026-76959

Name of the Vulnerable Software and Affected Versions Zabbix version 7.4 Description The cryptographic key used for signing Frontend sessions is incorrectly written to the database seed. This issue affects deployments that simultaneously use SAML authentication and guest users, allowing the key t...

CVE-2026-61979

Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...

CVE-2026-7557

An vulnerability summary for CVE-2026-7557: The SAML authentication module in Progress MarkLogic Server is affected by an improper verification of cryptographic signature. This allows an unauthenticated remote attacker to bypass authentication and impersonate any user (including administrators) i...

CVE-2026-18092

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because newfromxml reads assertion identity with document-wide XPath instead of the signed subtree. newfromxml reads the NameID, attribute values, SessionIndex, audience and other identity fields...

CVE-2026-18092

Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because newfromxml reads assertion identity with document-wide XPath instead of the signed subtree. newfromxml reads the NameID, attribute values, SessionIndex, audience and other identity fields...