lempo

Lempo：Portainer上的LDAP暴露 CVE-2018-19466 | Mauro Eldritch（又名 plaguedoktor） root@kitploit: ./lempo.rb TARGETIP TARGETUSER TARGETPASSWORD 此利用程序是对我的演讲《使用PAZUZU黑入Docker》的补充。 演示 | 日期| 会议| 视频链接| 幻灯片链接 ---|---|---|---|--- 1| 2018年11月| DEVFEST Siberia| 待定|...

CVE-2026-36436-Public-Reference-Pack

CVE-2026-36436-Public-Reference-Pack Riepilogo Una vulnerabilità in Trisolutions BRPerfX versione 1.4.4.0 espone le credenziali LDAP in chiaro all'interno dell'interfaccia di configurazione amministrativa. Un amministratore autenticato può ispezionare il codice lato client utilizzando gli strumen...

Security update for samba

This update for samba fixes the following issues CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. CVE-2026-58216: 6-byte heap...

PT-2023-1981

Name of the Vulnerable Software and Affected Versions 1C-Bitrix Bitrix24 versions through 22.200.200 Description The issue is related to insufficient protection of registration data in the AD/LDAP server settings, allowing a remote attacker to gain unauthorized access to protected information. Th...

Apache Archiva Injection Vulnerability

Apache Archiva is a suite of software from the Apache USA Software Foundation for managing one or more remote repositories. The software provides features such as remote Repository agents, role-based secure access management, and usage reporting. A security vulnerability exists in Apache Archiva...

Netscape FTP Server - "Professional" as hell :>

Standard disclaimer applies. These are my private oppinions and observations. Netscape Professional Services FTP server is used on high-performance servers for accessing virtual webserver accounts etc. It works with LDAP and seems to be quite often shipped by Sun with ISP instalations. Due to poo...