Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/10/14 5:36 p.m.•20 views

CVE-2026-42568

CVE-2026-42568 — YAMCS LDAP Injection in LdapAuthModule Summary An LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule. The username parameter is inserted directly into LDAP search filters without RFC 4515 escaping, allowing authentication bypass. Field| Value ---|--- CVE|...

4.3CVSS6.3AI score0.01009EPSS
SaveExploits3References2
Packet Storm
Packet Storm
•added 2026/06/16 12:00 a.m.•103 views

📄 YAMCS 5.12.6 LdapAuthModule LDAP Injection / Authentication Bypass

This Metasploit module exploits an LDAP injection vulnerability in the YAMCS LdapAuthModule. The username parameter is inserted directly into LDAP search filters without RFC 4515 escaping, allowing an attacker to bypass authentication. By crafting a malicious username containing LDAP special...

4.3CVSS5.8AI score0.01009EPSS
SaveExploits3
Cvelist
Cvelist
•added 2026/06/10 10:15 p.m.•51 views

CVE-2026-42568 Yamcs Vulnerable to LDAP Injection in LdapAuthModule

Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule when constructing search filters. The username parameter is inserted directly into the LDAP filter without proper RFC 4515 escaping. Versions 5.13...

4.3CVSS0.01009EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
•added 2026/06/10 10:15 p.m.•14 views

CVE-2026-42568 Yamcs Vulnerable to LDAP Injection in LdapAuthModule

Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule when constructing search filters. The username parameter is inserted directly into the LDAP filter without proper RFC 4515 escaping. Versions 5.13...

4.3CVSS5.8AI score0.01009EPSS
SaveExploits3References3
OSV
OSV
•added 2026/05/26 11:39 p.m.•63 views

GHSA-CQH3-JG8P-336J Yamcs Vulnerable to LDAP Injection in LdapAuthModule

Summary An LDAP injection vulnerability exists in org.yamcs.security.LdapAuthModule when constructing search filters. The username parameter is inserted directly into the LDAP filter without proper RFC 4515 escaping. Root Cause File:...

4.3CVSS6AI score0.01009EPSS
SaveExploits3References5
Snyk
Snyk
•added 2026/05/26 11:39 p.m.•34 views

LDAP Injection

Overview Affected versions of this package are vulnerable to LDAP Injection via the LdapAuthModule process. An attacker can gain unauthorized access to user accounts by injecting specially crafted input into the username parameter during LDAP authentication. Note: This is only exploitable if the...

5.3CVSS5.8AI score0.01009EPSS
SaveExploits3References2
Rows per page
Query Builder