4 matches found
CVE-2022-23131
CVE-2022-23131 Zabbix - SAML SSO 身份验证绕过 描述 在启用了 SAML SSO 身份验证(非默认配置)的情况下,由于存储在会话中的用户登录信息未经验证,恶意行为者可以修改会话数据。 搜索语法: root@kitploit: shodan-query: http.favicon.hash:892542951 root@kitploit: fofa-query: app="ZABBIX-监控系统" && body="saml" 用法 root@kitploit: python3 zabbixsessionexp.py -t https:target.com ...
CVE-2026-53514
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, and in 1.6.14 and later when invitation IDs can be obtained outside the invited mailbox and requireEmailVerificationOnInvitation: true is not enabled, the organization plugin's acceptInvitation,...
CVE-2026-53514
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, and in 1.6.14 and later when invitation IDs can be obtained outside the invited mailbox and requireEmailVerificationOnInvitation: true is not enabled, the organization plugin's acceptInvitation,...
CVE-2018-17210
An issue was discovered in PrinterOn Central Print Services CPS through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass...