Search Vulnerabilities

ASP.NET Core Elevation of Privilege Vulnerability

LDAP Injection in PEAKUP's PassGate

LDAP Injection in HAVELSAN's Liman MYS

Apache Shiro: LDAP DN Injection in DefaultLdapRealm

Yamcs Vulnerable to LDAP Injection in LdapAuthModule

Roxy-WI: LDAP injection in /user/ldap/<username> (admin-only)

Apache Airflow FAB provider: LDAP Filter Injection in FAB Auth Manager _search_ldap reachable via /auth/token

Apache CXF: LDAP Injection vulnerability in XKMS LDAP Repository

LDAP filter injection

Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction

ZITADEL: LDAP Filter Injection in Login Flow

Lemur: LDAP Filter Injection enables post-authentication privilege escalation

ProxyAuth Addon LDAP Injection in mitmproxy

LDAP Injection in PAC4J

Maddy Mail Server: LDAP Filter Injection via Unsanitized Username

LDAP Injection Vulnerability in LDAPStoreHelper.java

LDAP injection in MISP ApacheAuthenticate when using a user-controlled Apache environment variable

OPNsense has an LDAP Injection via Unsanitized Username in Authentication

PGP Decryption Sender LDAP Injection

PGP Decryption Recipient LDAP Injection