GitHub Repos· Aug 25, 2026· by r000t1ng

r000t1ng/Host-Manipulation-Siteminder

Open Original Article ↗
Injecting a hidden field into a Broadcom SiteMinder login form to control where the user lands after they authenticate.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#authentication#broadcom#open-redirect#proof-of-concept#saml#security-research#siteminder#sso