CVE-2021-42770

A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...

CVE-2021-42770

A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...

CVE-2021-42770

A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...

Cross site scripting

A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...

CVE-2021-42770

CVE-2021-42770 affects OPNsense prior to 21.7.4. The vulnerability is a Cross-site Scripting (XSS) flaw that can be triggered via the LDAP attribute return in the authentication tester. Impact is limited to contexts that render the affected LDAP attribute data in a user’s browser; no exploitation...

CVE-2021-42770

A Cross-site scripting XSS vulnerability was discovered in OPNsense before 21.7.4 via the LDAP attribute return in the authentication tester...

Samba DoS Vulnerability (CVE-2019-3824)

Samba is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Fedora: Security Advisory for bind-dyndb-ldap (FEDORA-2021-58e7b873b7)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

LDAPmonitor - Monitor Creation, Deletion And Changes To LDAP Objects Live During Your Pentest Or System Administration!

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration! With this tool you can quickly see if your attack worked and if it changed LDAP attributes of the target object. Features Feature | Python .py | CSharp .exe | Powershell .ps1 ---|---|---|---...

[SECURITY] Fedora 35 Update: bind-dyndb-ldap-11.9-8.fc35

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

Exploit for Injection in Forgerock Openam

CVE-2021-29156 Proof-of-Concept c 2021 GuidePoint Security...

LDAP Injection

github.com/stevenweathers/thunderdome-planning-poker is vulnerable to LDAP injection. Lack of an escape filter allows remote attackers to inject specially crafted values through UserName parameter resulting in LDAP injection vulnerability. Successful attackers are able to read, modify or delete...

[SECURITY] Fedora 35 Update: curl-7.79.1-1.fc35

curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, IMA P, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Thunderdome injection vulnerability

Thunderdome is an open source agile planning poker application with an interesting theme by Steven Weathers, an individual developer in the U.S. An injection vulnerability exists in Thunderdome, which stems from the LDAP authentication feature not properly escaping the provided username, and no...

Fortinet FortiOS Default Configuration Vulnerability

Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol LDAP server...

OpenAM 13.0 - LDAP Injection Exploit

Exploit Title: OpenAM 13.0 - LDAP Injection Exploit Author: Charlton Trezevant, GuidePoint Security Vendor Homepage: https://www.forgerock.com/ Software Link: https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/13.0.0,...

Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2021-84253)

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A security vulnerability exists i...

OpenAM 13.0 - LDAP Injection

Exploit Title: OpenAM 13.0 - LDAP Injection Date: 03/11/2021 Exploit Author: Charlton Trezevant, GuidePoint Security Vendor Homepage: https://www.forgerock.com/ Software Link: https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/13.0.0,...

CVE-2020-15935

A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords and RADIUS shared secret by deobfuscating the passwords entry fields...

Code injection

A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as users LDAP passwords and RADIUS shared secret by deobfuscating the passwords entry fields...