64 matches found
CVE-2020-3580
CVE-2020-3580 Cisco ASA / FTD reflected XSS in the WebVPN SAML SP ACS endpoint /+CSCOE+/saml/sp/acs. Patched in cisco-sa-asaftd-xss-multiple-FCB3vPZe. This repo contains: xss.html — a human-verifiable PoC for authorized targets. src/ — a discovery + scope-aware validation pipeline. docs/ —...
SAML IDP and SAML SP Controllers NetScaler ADC NetScaler Gateway
The vulnerability of SAML IDP and SAML SP authentication mechanisms in NetScaler ADC formerly Citrix ADC and NetScaler Gateway virtual environment access control systems is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to...
CVE-2026-107406 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: For the following versions: Applicable only...
Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-107406
Severity - Critical Description of Problem A vulnerability has been discovered in Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of Citrix NetScaler ADC and Citrix...
CLEANSTART-2024-DI95704 Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability
Security vulnerability affects the drupal7 package. Xecurify's miniOrange Premium, Standard, and Enterprise Drupal SAML SP modules possess an authentication and authorization bypass vulnerability...
WordPress SAML Single Sign On plugin < 6.0.0 - Unauthenticated Privilege Escalation vulnerability
Unauthenticated Privilege Escalation vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin SAML SP Single Sign On versions 6.0.0...
HPESBMU05147 rev.1 - HPE IceWall products, Denial of Service vulnerability
Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall Federation Agent 4.0 RHEL7, RHEL8, RHEL9, RHEL10, Windows IceWall Federation Proxy 4.0 RHEL8, RHEL9, RHEL10, Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | -...
PT-2026-89249
Name of the Vulnerable Software and Affected Versions Drupal SAML SSO - Service Provider versions 0.0.0 through 3.2.0 Description The module allows a Drupal site to function as a SAML 2.0 Service Provider for external identity provider authentication. It contains hard-coded credentials that may...
PT-2026-89246
Name of the Vulnerable Software and Affected Versions Drupal SAML SSO - Service Provider versions 0.0.0 through 3.2.0 Description Improper verification of cryptographic signatures allows for signature spoofing. The module fails to properly restrict the signature algorithm used to validate a SAML...
WordPress SAML Single Sign On – SSO Login plugin <= 5.4.6 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by Tanishq Shah, Thatchapol Booranatanit AliceZz in WordPress Plugin SAML SP Single Sign On versions = 5.4.6...
CVE-2026-77998: Authorization Bypass Through User-Controlled Key
Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO 11.0.2, SAML SP Single Sign On – Login with ADFS 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps 6.4 - This is due to the mosamlvalidatesignature function...
VulnCheck KEV: CVE-2026-61979
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-61979
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-61979 WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-61979 WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-61979
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
EUVD-2026-57976
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-61979
The Xecurify miniOrange SAML 2.0 Single Sign On WordPress plugin (versions
WordPress SAML SP Single Sign On plugin <= 5.4.3 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by sequenceX0 in WordPress Plugin SAML SP Single Sign On versions = 5.4.3...