writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

writehat

WriteHat 是一个报告工具，它将 Microsoft Word（以及许多小时的痛苦）从报告流程中移除。Markdown -- HTML -- PDF 。由渗透测试员为渗透测试员创建 - 但也可用于生成任何类型的报告。基于 Django Python 3 编写。 特性： 轻松生成漂亮的渗透测试报告 即时拖放式报告构建器 支持 Markdown - 包括代码块、表格等 裁剪、标注、添加说明并上传图片 可自定义的报告背景/页脚 为各个报告部分分配操作员并跟踪状态 能够克隆报告并作为模板使用 发现项数据库 支持多种评分类型 CVSS 3.1, DREAD 可从同一组发现项轻松生成多份报告...

Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the...

CVE-2026-81205

CVE-2026-81205 is an LDAP injection vulnerability in the Drupal LDAP / Active Directory Integration module (versions 0.0.0 through 2.2.1). The module does not sufficiently sanitize user-supplied input before incorporating it into an LDAP search filter, allowing an unauthenticated, remote attacker...

OESA-2026-3151 sssd security update

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...

n8n: LDAP Email-Based Account Linking Allows Privilege Escalation and Account Takeover

Impact When LDAP authentication is enabled, n8n automatically linked an LDAP identity to an existing local account if the LDAP email attribute matched the local account's email. An authenticated LDAP user who could control their own LDAP email attribute could set it to match another user's email ...

EUVD-2017-8874

Malware in sbrugna...

EUVD-2015-3259

Malware in sbrugna...

EUVD-2023-54361

Malicious code in bioql PyPI...

CVE-2023-5003

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to export said logs. Unfortunately, this log file is never removed, and remains accessible to any users knowing the URL to do so...

CVE-2023-3447

The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Injection in versions up to, and including, 4.1.5. This is due to insufficient escaping on the supplied username value. This makes it possible for attackers, with an existing account on a vulnerable...

CVE-2023-0812

The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.1 does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure...

CVE-2025-27414

MinIO is a high performance object storage. Starting in RELEASE.2024-06-06T09-36-42Z and prior to RELEASE.2025-02-28T09-55-16Z, a bug in evaluating the trust of the SSH key used in an SFTP connection to MinIO allows authentication bypass and unauthorized data access. On a MinIO server with SFTP...

Exploit for Out-of-bounds Read in Microsoft

metasploit-ldapnightmare SafeBreaches CVE-2024-49113 POCLdapN...

[SECURITY] Fedora 41 Update: sympa-6.2.74-1.fc41

Sympa is scalable and highly customizable mailing list manager. It can cope with big lists 200,000 subscribers and comes with a complete user and admin Web interface. It is internationalized, and supports the us, fr, de, es, it, fi, and chinese locales. A scripting language allows you to extend t...

[SECURITY] Fedora 40 Update: sympa-6.2.74-1.fc40

Sympa is scalable and highly customizable mailing list manager. It can cope with big lists 200,000 subscribers and comes with a complete user and admin Web interface. It is internationalized, and supports the us, fr, de, es, it, fi, and chinese locales. A scripting language allows you to extend t...

CVE-2019-17082

Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control...

CVE-2019-17082

Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control...

CVE-2019-17082

Insufficiently Protected Credentials vulnerability in OpenText™ AccuRev allows Authentication Bypass. When installed on a Linux or Solaris system the vulnerability could allow anyone who knows a valid AccuRev username can use the AccuRev client to login and gain access to AccuRev source control...

CVE-2019-17082

OpenText AccuRev (Linux/Solaris) is affected by CVE-2019-17082, an Insufficiently Protected Credentials vulnerability that allows authentication bypass. The issue enables login without a password for users with a valid AccuRev username, affecting AccuRev 2017.1. CVSS 4.0 base score is 9.0 (CRITIC...