| SAML Authentication Bypass Leading to Admin Panel Access |
|
|
|
| POST to XSS: Leveraging Pseudo Protocols to Gain JavaScript Evaluation in SSO Flows |
|
|
|
| Auth Bypass Round Two |
|
|
|
| crewjam/saml - IdP XSS Via Missing Binding Syntax Validation In ACS Location |
|
|
|
| How to break SAML if I have paws? |
|
|
|
| SAMLjacking a poisoned tenant |
|
|
|
| Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway |
|
|
|
| Redash SAML Authentication Bypass |
|
|
|
| TOPdesk vulnerable to XML Signature Wrapping Attacks |
|
|
|
| CVE-2022-47966 SAML ShowStopper |
|
|
|
| Azure Active Directory Flaw Allowed SAML Persistence |
|
|
|
| Gregor Samsa: Exploiting Java's XML Signature Verification |
|
|
|
| CVE-2022-25262 | JetBrains Hub single-click SAML response takeover |
|
|
|
| Oracle WebLogic - Multiple SAML Vulnerabilities (CVE-2018-2998/CVE-2018-2933) |
|
|
|
| Duo Finds SAML Vulnerabilities Affecting Multiple Implementations |
|
|
|
| Uber Bug Bounty: Gaining Access To An Internal Chat System |
|
|
|
writeups.xyz
/
SAML