teleport

Teleport ofrece conectividad, autenticación, controles de acceso y auditoría para la infraestructura. Podrías usar Teleport para: Configurar el inicio de sesión único SSO para toda tu infraestructura en la nube y local on-prem. Proteger el acceso a servidores, clústeres de Kubernetes, bases de...

authelia

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on SSO for your applications via a web portal. It acts as a companion for reverse proxies by allowing, denying, or redirecting requests. Documentation is available at...

OpenAM

Open Access Management OpenAM es una solución de gestión de accesos que incluye Autenticación, SSO, Autorización, Federación, Entitlements y Seguridad de Servicios Web. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 y OpenID Connect garantizan que OpenAM se integre fácilmente con...

CVE-2026-24858

CVE-2026-24858 Vulnerability Analysis Report Full Version with Sources Fortinet FortiCloud SSO Authentication Bypass Vulnerability Document Version : 2.0 Full Source Attribution Version Last Updated : January 29, 2026 Purpose : Security Audit, Technical Documentation, Incident Response 📋 Table of...

cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-sistema de monitoreo" && body="saml" Ejecución python cve-2022-23131.py https://www.example.com Admin Usa el exploit para generar signedsession, reemplaza la cookie, luego haz clic en Sign in with Single Sign-On SAML Por defecto es Admin Respeta los límites, las...

CVE-2022-23131

CVE-2022-23131 Zabbix sso vulnerabilidad Al igual que otros poc de gayhub, la autenticación sso tiene problemas, la mayoría de las pruebas en entornos no tienen éxito. Inténtalo manualmente...

-CVE-2022-22954-scanner

CVE-2022-22954-scanner Descripción de la vulnerabilidad VMware Workspace ONE Access anteriormente conocido como VMware Identity Manager está diseñado para permitir que sus empleados accedan más rápidamente a aplicaciones SaaS, web y nativas móviles mediante autenticación multifactor, acceso...

CVE-2026-82843

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

CVE-2026-82843 WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitution

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

CVE-2026-82843

The WP OAuth Server (Login with WordPress) WordPress plugin, in versions before 6.4.0 , is vulnerable to a cross-user account takeover due to an improper authentication flaw. The plugin fails to bind the issued OpenID Connect identity assertion to the specific authorization grant being exchanged....

WordPress SAML Single Sign On plugin < 6.0.0 - Unauthenticated Privilege Escalation vulnerability

Unauthenticated Privilege Escalation vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin SAML SP Single Sign On versions 6.0.0...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 - bypass de SAML SSO root@kitploit: fofa: app="ZABBIX-监控系统" && body="saml"...

CVE-2026-82842

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identit...

CVE-2026-82842 SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account Matching

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identit...

CVE-2026-82842

The SAML Single Sign On WordPress plugin (MiniOrange SAML 2.0 SSO) versions before 6.0.0 fail to honour the configured criterion for matching an incoming single sign-on identity to a WordPress account. The plugin always resolves the identity by login name , regardless of the site's chosen criteri...

EUVD-2026-83667

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identit...

CVE-2026-82842 SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account Matching

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identit...

CVE-2026-82842: Improper Privilege Management

The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login name whatever the site has chosen, which allows an attacker who can have the site's identit...

sap_logon_ticket

saplogonticket Kit de herramientas general relacionado con el mecanismo SSO de SAP: los Logon Tickets...

WordPress Single Sign On For TNG plugin < 2.2.0 - Unauthenticated Arbitrary Password Reset vulnerability

Unauthenticated Arbitrary Password Reset vulnerability discovered by moonge in WordPress Plugin Single Sign On For TNG versions 2.2.0...