CVE-2022-39299_PoC_Generator

Explotando CVE-2022-39299 Bypass de firma mediante múltiples elementos raíz Aviso : https://github.com/node-saml/passport-saml/security/advisories/GHSA-m974-647v-whv7 Parche : https://github.com/node-saml/passport-saml/commit/8b7e3f5a91c8e5ac7e890a0c90bc7491ce33155e Ejemplo de payload base extraí...

CVE-2026-15013

CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 Bypass de Autenticación PoC Prueba de concepto para CVE-2026-15013 : bypass de autenticación no autenticado mediante confusión de algoritmo de firma SAML HMAC-SHA1 en el plugin de WordPress SAML Single Sign On – SSO Login de miniOrange versiones hasta ...

CVE-2025-59718-PoC

CVE-2025-59718 Exploit Wizard Resumen Esta herramienta es un script de explotación de prueba de concepto PoC para CVE-2025-59718, una vulnerabilidad crítica de omisión de autenticación en productos Fortinet por ejemplo, FortiOS, FortiProxy, FortiSwitchManager debido a la verificación incorrecta d...

CVE-2026-11374-check

CVE-2026-11374 Script de Detección de Precondición para ManageEngine AD360 Un script de detección para la precondición de explotación de CVE-2026-11374, una falla predecible de tickets SSO que permite la toma de control de cuentas sin autenticación en la suite ManageEngine AD360. Los cuatro...

CVE-2026-53625-GLPI-PoC

CVE-2026-53625 - PoC de Escalada de Privilegios en GLPI mediante Manipulación de authtype 📌 Resumen Este repositorio proporciona una Prueba de Concepto PoC ética para CVE-2026-53625 , una vulnerabilidad de escalada de privilegios de severidad Alta en GLPI que afecta a todas las versiones desde 0....

CVE-2026-15964-PoC

CVE-2026-15964 - Single Sign On For TNG = 2.0.0 Unauthenticated privilege escalation via unverified password change in the WordPress plugin Single Sign On For TNG. | ---|--- Severity| Critical 9.8 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-620 Unverified Password Change Affected|...

CVE-2020-5148

CVE-2020-5148 Autenticación forzada en el agente SSO de SonicWall UTM El agente SSO de SonicWall identifica al usuario detrás de una dirección IP dada sondeando esa estación de trabajo con NetAPI el método predeterminado o WMI. No valida la estación de trabajo antes de iniciar la autenticación...

CVE-2021-3754

CVE-2021-3754 Este repositorio documenta los detalles de vulnerabilidad y el exploit para CVE-2021-3754 descubierto y reportado por mí mismo el 21 de agosto de 2021 Métricas CWE-20: Validación de entrada incorrecta CVSS: 5.3 MEDIUM Descripción Se encontró una falla en Apache Keycloak y Redhat SSO...

CVE-2026-75807

The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.4.6. This is due to the mosamlloginvalidate ACS handler persisting the X.509 certificate extracted from an incoming SAMLResponse into the mosamlrequiredcertificate...

CVE-2022-23131

Vulnerabilità di Bypass dell'Accesso SAML SSO di Zabbix CVE-2022-23131 Ambiente e Poc di CVE-2022-23131 Ambiente Puoi creare un Zabbix con SAML SSO seguendo i passaggi in Ambiente Zabbix per CVE-2022-23131. Poc Il Poc è stato modificato da jweny Utilizzo: root@kitploit: go run poc.go check -t...

CVE-2026-75807 SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning

The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.4.6. This is due to the mosamlloginvalidate ACS handler persisting the X.509 certificate extracted from an incoming SAMLResponse into the mosamlrequiredcertificate...

EUVD-2026-68133

The SAML Single Sign On – SSO Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.4.6. This is due to the mosamlloginvalidate ACS handler persisting the X.509 certificate extracted from an incoming SAMLResponse into the mosamlrequiredcertificate...

CVE-2026-75807

The SAML Single Sign On – SSO Login plugin for WordPress (versions up to 5.4.6 ) is vulnerable to an unauthenticated authentication bypass caused by X.509 certificate poisoning. The mo_saml_login_validate() ACS handler persists the X.509 certificate from an incoming SAMLResponse into the mo_saml_...

CVE-2023-3128

CVE-2023-3128 Per verificare se un dominio è vulnerabile a CVE-2023-3128, che comporta un bypass dell'autenticazione in Grafana dovuto alla validazione della rivendicazione email di Azure AD, puoi utilizzare il seguente script Python: !/usr/bin/env python3 import requests import argparse def...

CVE-2022-26138

CVE-2022-26138 CVE-2022-23131 - bypass SAML SSO root@kitploit: fofa: iconhash="-305179312"...

EUVD-2026-66214

@better-auth/sso before 1.6.27 and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7 prerelease line contains two domain-ownership flaws. When domain verification is disabled, automatic organization assignment accepts unverified provider domains, allowing an authenticated organizati...

PT-2026-83496

Name of the Vulnerable Software and Affected Versions SAML Single Sign On – SSO Login plugin for WordPress versions prior to 5.4.7 Description An authentication bypass exists due to the mo saml login validate ACS handler persisting the X.509 certificate extracted from an incoming SAMLResponse int...

CVE-2026-82263

Logto through 1.42.0 contains a server-side request forgery vulnerability in the OIDC SSO connector creation endpoint that fails to validate the issuer URL parameter. Tenant administrators with Management API credentials can supply arbitrary internal URLs to trigger HTTP GET requests to private...

CVE-2026-53959

CVE-2026-53959 - 4gaBoards 3.3.9 - Offenlegung von Benutzerinformationen Dieses Repository enthält einen Proof-of-Concept-Exploit PoC für CVE-2026-53959 Haftungsausschluss Dieses Projekt dient ausschließlich Bildungszwecken und autorisierten Sicherheitstests. Verwenden Sie es nicht gegen Systeme,...

CVE-2026-82263 Logto Server-Side Request Forgery via OIDC SSO Connector Issuer URL

Logto through 1.42.0 contains a server-side request forgery vulnerability in the OIDC SSO connector creation endpoint that fails to validate the issuer URL parameter. Tenant administrators with Management API credentials can supply arbitrary internal URLs to trigger HTTP GET requests to private...