804 matches found
TeamPass
Teampass Self-hosted password management your whole team can trust Folder-level access control · authenticated AES-256-GCM encryption · compliance evidence Your secrets never leave your infrastructure. 🌐teampass.net · 📖Documentation · 💬Discussions · 🐳Docker Hub Contents About Who it's for Securit...
CVE-2026-111342
A memory overflow vulnerability exists in the LDAP authentication mechanism of Citrix NetScaler ADC and Citrix NetScaler Gateway . The flaw, caused by a buffer copy without checking input size (CWE-120 ), can lead to unpredictable behavior or a Denial of Service (DoS) . This vulnerability is spec...
CVE-2026-124627
In affected versions of Octopus Server, incorrect validation of the external identity linked to a newly registered user could result in that user receiving the LDAP-mapped team memberships and associated permissions of another user. This issue only affects instances with LDAP authentication enabl...
CVE-2026-124627
In affected versions of Octopus Server , an incorrect validation of the external identity linked to a newly registered user can cause that user to inherit the LDAP-mapped team memberships and associated permissions of another user. This vulnerability specifically impacts instances where LDAP auth...
EUVD-2026-124402
In affected versions of Octopus Server, incorrect validation of the external identity linked to a newly registered user could result in that user receiving the LDAP-mapped team memberships and associated permissions of another user. This issue only affects instances with LDAP authentication enabl...
CVE-2026-124627
In affected versions of Octopus Server, incorrect validation of the external identity linked to a newly registered user could result in that user receiving the LDAP-mapped team memberships and associated permissions of another user. This issue only affects instances with LDAP authentication enabl...
wavecrack
Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...
CVE-2026-105948
In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to edit their own login identities could result in that user being granted elevated permissions, up to and including system administrator access. This issue affects instances using...
CVE-2026-105948
In affected versions of Octopus Server , an incorrect validation of permissions allows users to edit their own login identities. This flaw can lead to privilege escalation , potentially granting the user system administrator access . The vulnerability specifically impacts instances utilizing LDAP...
EUVD-2026-123273
In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to edit their own login identities could result in that user being granted elevated permissions, up to and including system administrator access. This issue affects instances using...
CVE-2026-105948: Octopus Deploy Octopus Server: In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to…
In affected versions of Octopus Server, incorrect validation of permissions assigned to a user that would allow them to edit their own login identities could result in that user being granted elevated permissions, up to and including system administrator access. This issue affects instances using...
CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter
CVE-2026-5050 – Blind LDAP Injection via Unescaped Filter Program Code Python with ldap3 simulation ldapserversim.py - Simulated LDAP authentication server from flask import Flask, request, jsonify app = Flaskname Fake user database USERS = 'admin': 'password': 'secret', 'role': 'admin', 'user':...
CVE-2026-121637
An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session...
EUVD-2026-116933
An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session...
CVE-2026-121637
The WatchGuard AuthPoint Gateway contains an improper integrity validation vulnerability within its LDAP authentication callback . A network attacker who has obtained a valid header signature can forge the authentication result and transaction identifier in the request body. This flaw leads to un...
CVE-2026-121637 WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results
An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session...
CVE-2026-121637: WatchGuard AuthPoint Authentication Gateway: An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a…
An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session...
PT-2026-136982
An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session...