wavecrack

Wavecrack Description A user-friendly Web interface to share an hashcat cracking box among multiple users with some pre-defined options. Screenshots The homepage Adding an hash to crack Seeing the results and some stats Outline This Web application can be used to launch asynchronous password crac...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-ldap (UTSA-2026-054076)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054076 advisory. python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of...

EulerOS Virtualization 2.11.0 : python-ldap (EulerOS-SA-2026-3548)

According to the versions of the python-ldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5,...

EulerOS Virtualization 2.11.1 : python-ldap (EulerOS-SA-2026-3461)

According to the versions of the python-ldap packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5,...

python-ldap has sanitization bypass in ldap.filter.escape_filter_chars

SummaryThe sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and the non-default escapemode=1 is configured. DetailsThe method ldap.filter.escapefilterchars supports 3...

PYSEC-2026-1847 python-ldap has sanitization bypass in ldap.filter.escape_filter_chars

Summary The sanitization method ldap.filter.escapefilterchars can be tricked to skip escaping of special characters when a crafted list or dict is supplied as the assertionvalue parameter, and the non-default escapemode=1 is configured. Details The method ldap.filter.escapefilterchars supports 3...

django-cyverse-auth (1.0.0), django-iplant-auth (>=0.0.2, <=0.1.21) potentially affected by CVE-2025-61911 via python-ldap (2.4.19)

python-ldap PYPI version 2.4.19 is affected by a known vulnerability. The following packages have a transitive dependency on python-ldap and may be impacted: - django-cyverse-auth 1.0.0 - django-iplant-auth =0.0.2, =0.1.21 Source cves: CVE-2025-61911 Source advisory: OSV:PYSEC-2026-1847...

anomalydetection (0.0.0.dev1), ckanext-ldap (>=3.1.2, <=4.1.3) +26 more potentially affected by CVE-2025-61911 via python-ldap (>=3.0.0, <=3.4.4)

python-ldap PYPI version =3.0.0, =3.1.2, =3.7.1, =1.0.426, =2.2.1.dev6, =1.5.3, =0.4.4a3, =1.0.0, =0.0.0, =1.1.0, =3.7.0, =1.0.0, =1.1.7, =1.9.1 and more Source cves: CVE-2025-61911 Source advisory: OSV:PYSEC-2026-1847...

anomalydetection (0.0.0.dev1), ckanext-ldap (>=3.1.2, <=4.1.3) +26 more potentially affected by CVE-2025-61912 via python-ldap (>=3.0.0, <=3.4.4)

python-ldap PYPI version =3.0.0, =3.1.2, =3.7.1, =1.0.426, =2.2.1.dev6, =1.5.3, =0.4.4a3, =1.0.0, =0.0.0, =1.1.0, =3.7.0, =1.0.0, =1.1.7, =1.9.1 and more Source cves: CVE-2025-61912 Source advisory: OSV:PYSEC-2026-1846...

django-cyverse-auth (1.0.0), django-iplant-auth (>=0.0.2, <=0.1.21) potentially affected by CVE-2025-61912 via python-ldap (2.4.19)

python-ldap PYPI version 2.4.19 is affected by a known vulnerability. The following packages have a transitive dependency on python-ldap and may be impacted: - django-cyverse-auth 1.0.0 - django-iplant-auth =0.0.2, =0.1.21 Source cves: CVE-2025-61912 Source advisory: OSV:PYSEC-2026-1846...

PYSEC-2026-1846 python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination

Summary ldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to construct DNs from untrusted input can be made to consistently fail before a request is sent to the LDAP...

python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination

Summaryldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to construct DNs from untrusted input can be made to consistently fail before a request is sent to the LDAP serv...

Denial of Service in python-ldap

python-ldap before 3.4.0 is vulnerable to a denial of service when ldap.schema is used for untrusted schema definitions, because of a regular expression denial of service ReDoS flaw in the LDAP schema parser. By sending crafted regex input, a remote authenticated attacker could exploit this...

django-cyverse-auth (1.0.0), django-iplant-auth (>=0.0.2, <=0.1.21) potentially affected by CVE-2021-46823 via python-ldap (2.4.19)

python-ldap PYPI version 2.4.19 is affected by a known vulnerability. The following packages have a transitive dependency on python-ldap and may be impacted: - django-cyverse-auth 1.0.0 - django-iplant-auth =0.0.2, =0.1.21 Source cves: CVE-2021-46823 Source advisory: OSV:PYSEC-2026-912...

anomalydetection (0.0.0.dev1), csh-ldap (>=2.2.1.dev6, <=2.3.1.dev4) +10 more potentially affected by CVE-2021-46823 via python-ldap (>=3.0.0, <=3.3.1)

python-ldap PYPI version =3.0.0, =2.2.1.dev6, =0.4.4a3, =1.0.0, =0.0.0, =1.0.0, =1.1.7, =0.4.4a3, =0.0.1, =1.3.3, =0.8.0, =0.9.2 Source cves: CVE-2021-46823 Source advisory: OSV:PYSEC-2026-912...

Unity Linux 20.1070e Security Update: python-ldap (UTSA-2026-007091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007091 advisory. python-ldap is a lightweight directory access protocol LDAP client API for Python. In versions prior to 3.4.5, the sanitization method ldap.filter.escapefilterchars...

Security Bulletin: IBM Maximo Application Suite uses python-ldap-3.4.4.tar.gz, werkzeug-3.1.4-py3-none-any.whl and werkzeug-3.1.3-py3-none-any.whl which is vulnerable to CVE-2025-61911, CVE-2025-61912, CVE-2026-27199 and CVE-2026-21860.

Summary IBM Maximo Application Suite uses python-ldap-3.4.4.tar.gz, werkzeug-3.1.4-py3-none-any.whl and werkzeug-3.1.3-py3-none-any.whl which is vulnerable to CVE-2025-61911, CVE-2025-61912, CVE-2026-27199 and CVE-2026-21860. This bulletin contains information regarding the vulnerability and its...

SUSE: Security Advisory (SUSE-SU-2026:20933-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 16 Security Update : python-ldap (openSUSE-SU-2026:20421-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20421-1 advisory. - CVE-2025-61911: Enforce str for escapefilterchars bsc1251912. - CVE-2025-61912: Escape NULs as per RFC 4514 in escapednchars bsc1251913. Tenab...

Security update for python-ldap (moderate)

openSUSE security update: security update for python-ldap ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20421-1 Rating: moderate References: bsc1251912 bsc1251913 Cross-References: CVE-2025-61911 CVE-2025-61912 CVSS scores: CVE-2025-61911 SUSE : 6...