2386 matches found
authelia
!OpenSSF Best...
OpenAM
Open Access Management OpenAM est une solution de gestion des accès qui comprend l'authentification, l'authentification unique SSO, l'autorisation, la fédération, les habilitations et la sécurité des services web. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 et OpenID Connect garantisse...
teleport
Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...
-CVE-2022-22954-scanner
CVE-2022-22954-scanner وصف الثغرة تم تصميم VMware Workspace ONE Access المعروف سابقًا باسم VMware Identity Manager لتمكين موظفيك من الوصول بشكل أسرع إلى تطبيقات SaaS والويب وتطبيقات الأجهزة المحمولة الأصلية عبر المصادقة متعددة العوامل والوصول الشرطي والدخول الموحد. الإصدارات المتأثرة كما يلي:...
sap_logon_ticket
saplogonticket مجموعة أدوات عامة متعلقة بآلية الدخول الموحّد SSO في SAP: تذاكر تسجيل الدخول...
CVE-2026-24858
Rapport d'analyse de la vulnérabilité CVE-2026-24858 édition complète avec sources Vulnérabilité de contournement d'authentification Fortinet FortiCloud SSO Authentication Bypass Version du document : 2.0 édition avec sources complètes Dernière mise à jour : 29 janvier 2026 Objectif : Audit de...
CVE-2026-82183 OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID Assertion
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...
cve-2022-23131
cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" تشغيل python cve-2022-23131.py https://www.example.com Admin استخدم exp لإنشاء signedsession، واستبدل cookie، ثم انقر على Sign in with Single Sign-On SAML الافتراضي هو Admin احترام الحدود، العواقب على مسؤوليتك لقاء عابر، تحية للأشخاص العاديين...
CVE-2022-23131
CVE-2022-23131 Zabbix sso ثغرة مثل باقي PoCs على gayhub، مصادقة SSO بها مشكلة، وفشل الاختبار في معظم البيئات. جرّبه يدويًا بنفسك...
CVE-2022-23131
CVE-2022-23131 CVE-2022-23131 - SAML SSO bypass root@kitploit: fofa: app="ZABBIX-监控系统" && body="saml"...
Wordfence Argus Finds Critical Authentication Bypass in WPMU DEV Dashboard Plugin
On August 19th, 2026, during internal research, I discovered an Authentication Bypass vulnerability in WPMU DEV Dashboard, a WordPress plugin with an estimated 350,000 active installations. This vulnerability makes it possible for unauthenticated attackers to gain administrator access when Hub...
CVE-2026-16639
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...
CVE-2026-16639 Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...
CVE-2026-16639
CVE-2026-16639 is a critical authentication bypass in the Drupal Internationalization Single Sign-On module (versions 0.0.0 through 1.8.0). The module, used in multilingual websites with separate domain names per language, fails to sufficiently validate a short-lived token , allowing an attacker ...
WordPress SAML Single Sign On plugin 4.8.85-5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite vulnerability
Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite vulnerability discovered by Suhayb Ahmed in WordPress Plugin SAML Single Sign On – SSO Login versions 4.8.85-5.4.6...
CVE-2026-19842
The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticat...
CVE-2026-19842
The WordPress SAML Single Sign On plugin (versions 4.8.85–5.4.6) fails to verify SAML response signatures before storing certificates, then exposes a one-click admin control that promotes any stored certificate to the trusted signing anchor. An unauthenticated attacker can submit a self-signed ce...
CVE-2026-19842 SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite
The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticat...