CVE-2025-61912

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to...

CVE-2025-61912

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to...

CVE-2025-61911

Summary: The issue CVE-2025-61911 affects python-ldap up to version 3.4.4 (pre-3.4.5). When using ldap.filter.escape_filter_chars with escape_mode=1, the function can fail to fully escape characters if assertion_value is a crafted list or dict, risking LDAP injection. The 3.4.5 fix adds a type ch...

EUVD-2025-33797

python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and t...

EUVD-2009-0029

Malware in sbrugna...

EUVD-2019-10155

Malware in sbrugna...

EUVD-2008-0837

Malware in sbrugna...

EUVD-2025-12559

Malicious code in bioql PyPI...

EUVD-2025-32028

Malicious code in bioql PyPI...

EUVD-2022-35354

Malicious code in bioql PyPI...

EUVD-2025-29209

Malicious code in bioql PyPI...

EUVD-2022-35349

Malicious code in bioql PyPI...

EUVD-2024-43803

Malicious code in bioql PyPI...

EUVD-2022-35406

Malicious code in bioql PyPI...

EUVD-2022-26048

Malicious code in bioql PyPI...

EUVD-2025-27022

Malicious code in bioql PyPI...

EUVD-2022-35369

Malicious code in bioql PyPI...

EUVD-2025-32242

Malicious code in bioql PyPI...

CVE-2025-27231

The LDAP 'Bind password' value cannot be read after saving, but a Super Admin account can leak it by changing LDAP 'Host' to a rogue LDAP server. To mitigate this, the 'Bind password' value is now reset on 'Host' change...

Zabbix 安全漏洞

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. A security vulnerability exists in Zabbix, which stems from the fact that a super administrator account can leak the bind password by...