Lucene search
+L

11056 matches found

Nuclei
Nuclei
added 2 days ago51 views

Alerta < 8.1.0 - Authentication Bypass

Alerta prior to version 8.1.0 is prone to authentication bypass when using LDAP as an authorization provider and the LDAP server accepts Unauthenticated Bind requests. id: CVE-2020-26214 info: name: Alerta 8.1.0 - Authentication Bypass author: CasperGN,daffainfo severity: critical description:...

9.8CVSS8.6AI score0.65933EPSS
SaveExploits0References5
NVD
NVD
added 2 days ago4 views

CVE-2026-19930

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

6.5CVSS0.00242EPSS
SaveExploits0References8
EUVD
EUVD
added 2 days ago4 views

EUVD-2026-59846

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

6.5CVSS6.3AI score0.00242EPSS
SaveExploits0References8
CVE
CVE
added 2 days ago16 views

CVE-2026-19930

Dolibarr (up to 23.0.3) is affected by a LDAP injection in the User Cloning workflow. The vulnerability resides in htdocs/user/card.php and is triggered by manipulating the ID argument, allowing remote execution of the attack. Public exploit exists. The patch is identified as 798e65356ede03c2812a...

6.5CVSS6.2AI score0.00242EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2 days ago9 views

CVE-2026-19930

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

6.5CVSS6.2AI score0.00242EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2 days ago34 views

CVE-2026-19930 Dolibarr User Cloning card.php ldap injection

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

6.5CVSS0.00242EPSS
SaveExploits0References8
OSV
OSV
added 2 days ago2 views

CVE-2026-19930 Dolibarr User Cloning card.php ldap injection

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

5.3CVSS5.3AI score
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2 days ago11 views

PT-2026-73076

A security flaw has been discovered in Dolibarr up to 23.0.3. Affected is an unknown function of the file htdocs/user/card.php of the component User Cloning. The manipulation of the argument ID results in ldap injection. It is possible to launch the attack remotely. The exploit has been released ...

6.3CVSS6.2AI score0.00242EPSS
SaveExploits0References9
EUVD
EUVD
added 3 days ago8 views

EUVD-2026-58818

A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling...

4.8CVSS5.4AI score0.00183EPSS
SaveExploits0References3
NVD
NVD
added 4 days ago12 views

CVE-2026-74241

A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling...

4.8CVSS0.00183EPSS
SaveExploits0References2
Cvelist
Cvelist
added 4 days ago32 views

CVE-2026-74241 Quay: ldap referral filter injection in quay external ldap authentication

A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling...

4.8CVSS0.00183EPSS
SaveExploits0References2
CVE
CVE
added 4 days ago23 views

CVE-2026-74241

Summary: CVE-2026-74241 affects Red Hat Quay’s external LDAP authentication. When LDAP referrals are returned during authentication, the username input isn’t properly escaped, allowing an attacker to inject LDAP filter metacharacters and perform user-existence oracle checks at the referral DN. Th...

4.8CVSS5.3AI score0.00183EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 4 days ago7 views

CVE-2026-74241

A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling...

4.8CVSS4.9AI score0.00183EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 4 days ago9 views

Fabric CA Developer's Guide: LDAP Injection via Unescaped Username in GetUser Filter

When fabric-ca is configured with an LDAP backend, the username from HTTP Basic authentication is included in an LDAP uid search filter without proper escaping. An unauthenticated attacker with network access to the CA enrollment endpoint could exploit this to perform LDAP injection before passwo...

5.5AI score
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 4 days ago11 views

PT-2026-72127

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description An issue exists in the external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during the authentication process, the system fails ...

4.8CVSS5.2AI score0.00183EPSS
SaveExploits0References4
Cvelist
Cvelist
added 5 days ago28 views

CVE-2026-17438 IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP []

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...

4.4CVSS0.00091EPSS
SaveExploits0References1
NVD
NVD
added 5 days ago10 views

CVE-2026-73644

OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.2, the SASL PLAIN authorization identity path in opendj-server-legacy/src/main/java/org/opends/server/extensions/PlainSASLMechanismHandler.java checked the PROXIEDAUTH privilege but did not evaluate the mayProxy proxy ACI scope when an...

9.6CVSS0.00294EPSS
SaveExploits0References3
OSV
OSV
added 5 days ago5 views

MGASA-2026-0333 Updated roundcubemail packages fix security vulnerabilities

Add basic validation for content proxied by the css proxy Fix SSRF bypass via specific local address URLs using 100.64.0.0/10 and fe80::/10 nets, Fix SSRF filter bypass via various forms of nip.io/sslip.io hostnames evading islocalurl check Fix remote content blocking bypass via unclosed url in a...

10CVSS5.5AI score0.00312EPSS
SaveExploits1References4
Mageia
Mageia
added 5 days ago6 views

Updated roundcubemail packages fix security vulnerabilities

Add basic validation for content proxied by the css proxy Fix SSRF bypass via specific local address URLs using 100.64.0.0/10 and fe80::/10 nets, Fix SSRF filter bypass via various forms of nip.io/sslip.io hostnames evading islocalurl check Fix remote content blocking bypass via unclosed url in a...

10CVSS5.5AI score0.00312EPSS
SaveExploits1References3
Nuclei
Nuclei
added 5 days ago56 views

Zimbra Collaboration Server 7.2.2/8.0.2 Local File Inclusion

A directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. dot dot in the skin parameter. This can be leveraged to execute arbitrary code by obtaining LDAP...

5CVSS8.9AI score0.86311EPSS
SaveExploits8References5
Rows per page
Query Builder