2330 matches found
authelia
!OpenSSF Best...
OpenAM
إدارة الوصول المفتوحة OpenAM هي حل لإدارة الوصول يشمل المصادقة، والدخول الموحّد SSO، والترخيص، والاتحاد Federation، والصلاحيات Entitlements، وأمن خدمات الويب. تضمن ميزات الدخول الموحّد عبر النطاقات CDSSO، وSAML 2.0، وOAuth 2.0 وOpenID Connect أن يتكامل OpenAM بسهولة مع التطبيقات القديمة، والمخصصة...
teleport
Teleport provides connectivity, authentication, access controls and audit for infrastructure. You might use Teleport to: Set up single sign-on SSO for all of your cloud and on-prem infrastructure. Protect access to servers, Kubernetes clusters, databases, Windows desktops, web applications, and...
sap_logon_ticket
saplogonticket مجموعة أدوات عامة متعلقة بآلية الدخول الموحّد SSO في SAP: تذاكر تسجيل الدخول...
-CVE-2022-22954-scanner
CVE-2022-22954-scanner وصف الثغرة تم تصميم VMware Workspace ONE Access المعروف سابقًا باسم VMware Identity Manager لتمكين موظفيك من الوصول بشكل أسرع إلى تطبيقات SaaS والويب وتطبيقات الأجهزة المحمولة الأصلية عبر المصادقة متعددة العوامل والوصول الشرطي والدخول الموحد. الإصدارات المتأثرة كما يلي:...
CVE-2026-24858
تقرير تحليل الثغرة الأمنية CVE-2026-24858 النسخة الكاملة مع المصادر ثغرة تجاوز المصادقة في Fortinet FortiCloud SSO Authentication Bypass إصدار المستند : 2.0 نسخة كاملة التوثيق بالمصادر آخر تحديث : 29 يناير 2026 الغرض من الإعداد : التدقيق الأمني، التوثيق الفني، الاستجابة للحوادث 📋 جدول المحتويات 1...
CVE-2026-82183 OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID Assertion
The OAuth Single Sign On WordPress plugin before 7.0.1 does not verify the identity assertion returned by its Steam single sign-on flow, allowing unauthenticated attackers to log in as an arbitrary non-administrator user, and to create new accounts...
cve-2022-23131
cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" Запуск python cve-2022-23131.py https://www.example.com Admin Используйте exp для генерации signedsession, замените cookie, затем нажмите Sign in with Single Sign-On SAML По умолчанию: Admin Соблюдайте границы, ответственность за последствия – ...
CVE-2022-23131
CVE-2022-23131 Vulnérabilité SSO de Zabbix Comme les autres PoC sur gayhub, l'authentification SSO pose problème et le test échoue dans la plupart des environnements. Essayez donc manuellement par vous-même...
CVE-2022-23131
CVE-2022-23131 CVE-2022-23131 - SAML SSO bypass root@kitploit: fofa: app="ZABBIX-监控系统" && body="saml"...
Wordfence Argus Finds Critical Authentication Bypass in WPMU DEV Dashboard Plugin
On August 19th, 2026, during internal research, I discovered an Authentication Bypass vulnerability in WPMU DEV Dashboard, a WordPress plugin with an estimated 350,000 active installations. This vulnerability makes it possible for unauthenticated attackers to gain administrator access when Hub...
CVE-2026-16639
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...
CVE-2026-16639 Internationalization Single Sign-On - Critical - Access bypass - SA-CONTRIB-2026-081
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Internationalization Single Sign-On allows Authentication Bypass. This issue affects Internationalization Single Sign-On versions: from 0.0.0 to 1.8.0...
CVE-2026-16639
CVE-2026-16639 is a critical authentication bypass in the Drupal Internationalization Single Sign-On module (versions 0.0.0 through 1.8.0). The module, used in multilingual websites with separate domain names per language, fails to sufficiently validate a short-lived token , allowing an attacker ...
WordPress SAML Single Sign On plugin 4.8.85-5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite vulnerability
Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite vulnerability discovered by Suhayb Ahmed in WordPress Plugin SAML Single Sign On – SSO Login versions 4.8.85-5.4.6...
CVE-2026-19842
The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticat...
CVE-2026-19842
The WordPress SAML Single Sign On plugin (versions 4.8.85–5.4.6) fails to verify SAML response signatures before storing certificates, then exposes a one-click admin control that promotes any stored certificate to the trusted signing anchor. An unauthenticated attacker can submit a self-signed ce...
CVE-2026-19842 SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite
The SAML Single Sign On WordPress plugin before 5.4.7 does not verify the signature of a SAML response before storing the certificate it carries, and offers an administrator a one-click control that promotes that stored certificate to the site's trusted signing certificate, allowing unauthenticat...