-CVE-2022-22954-scanner

CVE-2022-22954-scanner Vulnerability Introduction VMware Workspace ONE Access formerly VMware Identity Manager enables employees to accelerate access to SaaS, web, and native mobile applications through multi-factor authentication, conditional access, and single sign-on. Affected versions: VMware...

authelia

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

OpenAM

Open Access Management OpenAM 是一种访问管理解决方案，包含身份验证、单点登录、授权、联合、权限（Entitlements）和 Web 服务安全。 跨域单点登录（CDSSO）、SAML 2.0、OAuth 2.0 和 OpenID Connect 确保 OpenAM 无需任何修改即可轻松与旧版、自定义和云应用程序集成。 它是一个对开发者友好的开源控制解决方案，让您能够拥有并保护用户的数字身份。 主要功能 身份验证管理 借助 OpenAM，您可以使用各种身份验证方法设置复杂的身份验证流程，例如登录密码、OTP、保存的 Cookie、二维码认证等…… OpenAM...

teleport

Teleport は、インフラストラクチャに対する接続性、認証、アクセス制御、および監査を提供します。 Teleport は次のような用途に使用できます: クラウドおよびオンプレミスのインフラストラクチャすべてに対してシングルサインオン SSO を設定する。 長期間有効なキーやパスワードを使わずに、サーバー、Kubernetes クラスター、データベース、Windows デスクトップ、Web アプリケーション、クラウド API へのアクセスを保護する。 VPN や踏み台ホストを使わずに、NAT やファイアウォールの背後にあるリソースへ到達するためのセキュアトンネルを確立する。...

sap_logon_ticket

saplogonticket SAP の SSO メカニズム Logon Tickets に関連する汎用ツールキット...

CVE-2026-24858

CVE-2026-24858 脆弱性分析レポート（出典付き完全版） Fortinet FortiCloud SSO 認証バイパス脆弱性（Authentication Bypass） 文書バージョン : 2.0（出典完全表記版） 最終更新日 : 2026年1月29日 作成目的 : セキュリティ監査、技術文書化、インシデント対応 📋 目次 1. 概要および基本情報 2. 脆弱性メカニズム詳細分析 3. 影響を受ける製品およびバージョン 4. CVSSスコアおよび深刻度評価 5. 実際の攻撃シナリオおよびキャンペーン 6. 検知およびフォレンジック指標（IOCs） 7. 即時対応策 8...

cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" Run python cve-2022-23131.py https://www.example.com Admin Use the exp to generate signedsession, replace the cookie, then click Sign in with Single Sign-On SAML Default is Admin Act responsibly, you bear the consequences A chance encounter, a...

CVE-2022-23131

CVE-2022-23131 Zabbix SSO Vulnerability Just like other POCs on GitHub, there is an issue with SSO authentication, and most environments fail during testing. Try it manually yourself...

CVE-2026-97274

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...

CVE-2026-97274

The WordPress OAuth Single Sign On – SSO (OAuth Client) plugin, versions

EUVD-2026-89923

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...

CVE-2026-97274 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 - SAML SSO bypass fofa: app="ZABBIX-监控系统" && body="saml"...

PT-2026-98032

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.7 authentik versions prior to 2026.5.7 authentik versions prior to 2026.8.2 Description During an authentication or enrollment flow, the email authenticator accepts a recipient address provided in the setup...

CVE-2026-82843

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

CVE-2026-82843 WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitution

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

CVE-2026-82843 WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitution

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

CVE-2026-82843

The WP OAuth Server (Login with WordPress) WordPress plugin, in versions before 6.4.0 , is vulnerable to a cross-user account takeover due to an improper authentication flaw. The plugin fails to bind the issued OpenID Connect identity assertion to the specific authorization grant being exchanged....

CVE-2026-82843: Improper Authentication

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

PT-2026-97505

Name of the Vulnerable Software and Affected Versions Imprivata EAM versions prior to 26.2.7 Description The software lacks a mechanism to rotate the RSA key pair used for generating X.509 certificates after deployment. This means the key pair remains permanent once the system is deployed, which...