-CVE-2022-22954-scanner

CVE-2022-22954-scanner 漏洞介绍 VMware Workspace ONE Access（以前称为VMware Identity Manager）旨在通过多因素身份验证、条件访问和单点登录，让您的员工更快地访问SaaS、Web和本机移动应用程序。 受影响版本如下： VMware Workspace ONE Access Appliance （版本号：20.10.0.0 ，20.10.0.1 ，21.08.0.0 ，21.08.0.1 ） VMware Identity Manager Appliance （版本号：3.3.3 ， 3.3.4 ， 3.3.5...

authelia

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on SSO for your applications via a web portal. It acts as a companion for reverse proxies by allowing, denying, or redirecting requests. Documentation is available at...

teleport

Teleport 为基础设施提供连接、身份验证、访问控制和审计。 你可以使用 Teleport 来： 为你的所有云端和本地（on-prem）基础设施设置单点登录（SSO）。 保护对服务器、Kubernetes 集群、数据库、Windows 桌面、Web 应用和云 API 的访问，而无需长期有效的密钥或密码。 无需 VPN 或堡垒主机，即可建立安全隧道，访问 NAT 和防火墙后面的资源。 记录并审计 SSH、Kubernetes、数据库、RDP 和 Web 会话中的活动。 在用户、机器、工作负载和资源类型之间应用一致的基于角色的访问控制和基于属性的访问控制（RBAC/ABAC）。...

OpenAM

Open Access Management OpenAM 是一种访问管理解决方案，包含身份验证、单点登录、授权、联合、权限（Entitlements）和 Web 服务安全。 跨域单点登录（CDSSO）、SAML 2.0、OAuth 2.0 和 OpenID Connect 确保 OpenAM 无需任何修改即可轻松与旧版、自定义和云应用程序集成。 它是一个对开发者友好的开源控制解决方案，让您能够拥有并保护用户的数字身份。 主要功能 身份验证管理 借助 OpenAM，您可以使用各种身份验证方法设置复杂的身份验证流程，例如登录密码、OTP、保存的 Cookie、二维码认证等…… OpenAM...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 - bypass de SAML SSO root@kitploit: fofa: app="ZABBIX-监控系统" && body="saml"...

CVE-2026-82842

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identit...

CVE-2026-82842 SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account Matching

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identit...

CVE-2026-82842

The SAML Single Sign On WordPress plugin (MiniOrange SAML 2.0 SSO) versions before 6.0.0 fail to honour the configured criterion for matching an incoming single sign-on identity to a WordPress account. The plugin always resolves the identity by login name , regardless of the site's chosen criteri...

EUVD-2026-83667

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identit...

sap_logon_ticket

saplogonticket 与 SAP SSO 机制（Logon Tickets）相关的通用工具包...

CVE-2026-62108

Unauthenticated Broken Authentication in Headless Single Sign On = 1.7.0 versions...

CVE-2026-62108

CVE-2026-62108 is an unauthenticated Broken Authentication vulnerability in the Headless Single Sign On WordPress plugin, affecting versions 1.7.0 and earlier . Discovered by Joost Grunwald and scored 9.8 (CRITICAL) via CVSS 3.1 (network vector, no privileges or user interaction required, high im...

EUVD-2026-81491

Unauthenticated Broken Authentication in Headless Single Sign On = 1.7.0 versions...

CVE-2026-62108 WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Headless Single Sign On = 1.7.0 versions...

CVE-2026-24858

CVE-2026-24858 漏洞分析报告（含来源完整版） Fortinet FortiCloud SSO 认证绕过漏洞（Authentication Bypass） 文档版本 ：2.0（来源完整标注版） 最后更新 ：2026年1月29日 编写目的 ：安全审计、技术文档化、事件响应 📋 目录 1. 概述及基本信息 2. 漏洞机制详细分析 3. 受影响产品及版本 4. CVSS 评分及严重性评估 5. 实际攻击场景及活动 6. 检测及取证指标（IOCs） 7. 即时响应措施 8. 安全加固建议 9. 参考资料及来源 📋 概述及基本信息 1.1 漏洞摘要 CVE-2026-24858 是...

cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" 运行 python cve-2022-23131.py https://www.example.com Admin 利用exp生成signedsession，替换cookie，再点击 Sign in with Single Sign-On SAML 默认是Admin 尊重尺度，后果自负 萍水相逢，致敬不甘平凡的平凡人...

CVE-2022-23131

CVE-2022-23131 Zabbix sso漏洞 和gayhub其他poc一样，sso认证有问题，多数环境测试不成功。自己手动试试吧...

WordPress Headless Single Sign On plugin <= 1.7.0 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Joost Grunwald in WordPress Plugin Headless Single Sign On versions = 1.7.0...

EUVD-2026-69861

The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...

CVE-2026-82183 OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID Assertion

The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...