-CVE-2022-22954-scanner

CVE-2022-22954-scanner Présentation de la vulnérabilité VMware Workspace ONE Access anciennement VMware Identity Manager vise à permettre à vos employés d'accéder plus rapidement aux applications SaaS, Web et mobiles natives grâce à l'authentification multifacteur, à l'accès conditionnel et à...

OpenAM

Open Access ManagementOpenAM은 인증, SSO, 권한 부여, 페더레이션, Entitlements 및 웹 서비스 보안을 포함하는 액세스 관리 솔루션입니다. Cross Domain Single Sign OnCDSSO, SAML 2.0, OAuth 2.0 및 OpenID Connect는 OpenAM이 레거시, 맞춤형 및 클라우드 애플리케이션과 아무런 수정 없이도 쉽게 통합되도록 보장합니다. 개발자에게 친숙한 오픈소스 제어 솔루션으로, 사용자의 디지털 ID를 소유하고 보호할 수 있게 해줍니다. 주요 기능 인증 관...

authelia

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

teleport

Teleport обеспечивает подключение, аутентификацию, контроль доступа и аудит для инфраструктуры. Вы можете использовать Teleport для: Настройки единого входа SSO для всей вашей облачной и локальной инфраструктуры. Защиты доступа к серверам, кластерам Kubernetes, базам данных, рабочим столам Window...

sap_logon_ticket

saplogonticket Общий инструментарий, связанный с механизмом SSO в SAP: Logon Tickets...

CVE-2026-24858

Отчёт об анализе уязвимости CVE-2026-24858 полная версия с указанием источников Уязвимость обхода аутентификации Fortinet FortiCloud SSO Authentication Bypass Версия документа : 2.0 полная версия с указанием источников Последнее обновление : 29 января 2026 г. Цель создания : аудит безопасности,...

cve-2022-23131

cve-2022-23131 FOFA app="ZABBIX-监控系统" && body="saml" Exécution python cve-2022-23131.py https://www.example.com Admin Utilisez l'exp pour générer signedsession, remplacez le cookie, puis cliquez sur « Sign in with Single Sign-On SAML » Par défaut : Admin Respectez les limites, assumez les...

CVE-2022-23131

CVE-2022-23131 Vulnérabilité SSO de Zabbix Comme les autres PoC sur gayhub, l'authentification SSO pose problème et le test échoue dans la plupart des environnements. Essayez donc manuellement par vous-même...

CVE-2026-97274

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...

CVE-2026-97274

The WordPress OAuth Single Sign On – SSO (OAuth Client) plugin, versions

CVE-2026-97274 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...

EUVD-2026-89923

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO OAuth Client = 7.1.2 versions...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131 - Contournement SAML SSO fofa: app="ZABBIX-监控系统" && body="saml"...

PT-2026-98032

Name of the Vulnerable Software and Affected Versions authentik versions prior to 2026.2.7 authentik versions prior to 2026.5.7 authentik versions prior to 2026.8.2 Description During an authentication or enrollment flow, the email authenticator accepts a recipient address provided in the setup...

CVE-2026-82843

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

CVE-2026-82843 WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitution

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

CVE-2026-82843 WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitution

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

CVE-2026-82843

The WP OAuth Server (Login with WordPress) WordPress plugin, in versions before 6.4.0 , is vulnerable to a cross-user account takeover due to an improper authentication flaw. The plugin fails to bind the issued OpenID Connect identity assertion to the specific authorization grant being exchanged....

CVE-2026-82843: Improper Authentication

The WP OAuth Server Login with WordPress WordPress plugin before 6.4.0 does not bind the OpenID Connect identity assertion it issues to the authorization grant being exchanged, returning instead the assertion belonging to whichever user authenticated most recently, which allows users with the...

PT-2026-97166

Name of the Vulnerable Software and Affected Versions WP OAuth Server Login with WordPress versions prior to 6.4.0 Description The plugin fails to bind the OpenID Connect identity assertion to the authorization grant being exchanged. Instead, it returns the assertion of the most recently...