mi-laboratorio-log4shell

🚀 自動化Log4Shell（CVE-2021-44228）Play & Plug ラボ 自動化された単一コマンドのセキュリティ研究ラボです。Log4Shell（CVE-2021-44228） のリモートコード実行（RCE）脆弱性を実証・監査するために設計されています。 このプロジェクトは、必要なすべてのコンポーネント（脆弱なアプリケーション、悪意のあるLDAPリファラルサーバー、攻撃者ツール）を、Docker Composeを使用した統合・分離されたネットワークインフラストラクチャに集約します。 ⚙️ 主な特徴 100% Plug & Play:...

log4shell-docker-lab

Log4Shell Docker ラボ（CVE-2021-44228） コンポーネント この Docker ラボは、以下の3つのコンポーネントで構成されています： 脆弱性のある Spring Boot アプリケーション リモートコード実行に使用される .class ファイルをホストする HTTP サーバー 特定の LDAP クエリを HTTP サーバーにリダイレクトする LDAP リファラルサーバー Docker ラボのセットアップ 1. Docker ネットワーク root@kitploit: docker network create log4shell 2. Docker...

log4j-shell-poc

log4shell-poc CVE-2021-44228 Log4jの脆弱性（CVE-2021-44228）、通称Log4Shellの概念実証（PoC）エクスプロイトです。このツールは悪意のあるJavaクラスを生成し、LDAPリファラルサーバーを起動して、HTTP経由でペイロードを配信します。これにより、リモートの攻撃者は脆弱なターゲット上で任意のコマンドを実行できます。 特徴 デフォルトのバインドIPとしてローカルIPv4アドレスを自動検出します。 同梱のJDK 1.8.020サポート（推奨）。システムのJavaへのフォールバック付き。...

Linux Distros Unpatched Vulnerability : CVE-2026-70409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by...

eldap: eldap: Denial of Service via long LDAP referral URL port

A flaw was found in eldap, a component of Erlang/OTP. A malicious or compromised Lightweight Directory Access Protocol LDAP server could exploit this vulnerability by returning a referral Uniform Resource Locator URL with an excessively long port number. This unbounded port component is then...

CVE-2026-70409

A flaw was found in eldap, a component of Erlang/OTP. A malicious or compromised Lightweight Directory Access Protocol LDAP server could exploit this vulnerability by returning a referral Uniform Resource Locator URL with an excessively long port number. This unbounded port component is then...

DEBIAN-CVE-2026-70409

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port component is a very long run of digits. eldap:parseport/2 passes the port substring straight to...

CVE-2026-70409

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port component is a very long run of digits. eldap:parseport/2 passes the port substring straight to...

AZL-98475 CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port component is a very long run of digits. eldap:parseport/2 passes the port substring straight to...

UBUNTU-CVE-2026-70409

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port component is a very long run of digits. eldap:parseport/2 passes the port substring straight to...

CVE-2026-70409

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port component is a very long run of digits. eldap:parseport/2 passes the port substring straight to...

EUVD-2026-69247

Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port component is a very long run of digits. eldap:parseport/2 passes the port substring straight to...

EEF-CVE-2026-70409 eldap does not bound the port component of a referral URL before integer conversion

Summary Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP eldap allows a malicious or compromised LDAP server to degrade availability by returning a referral URL whose port component is a very long run of digits. eldap:parseport/2 passes the port substring straight to...

CVE-2026-3048 Nexus Repository 3 - Improper LDAP Referral Handling

An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate unintended server-side connections when interacting with a malicious LDAP server...

Important: java-1.7.0-openjdk

Issue Overview: DerValue unbounded memory allocation: It was discovered that the Libraries component of OpenJDK failed to sufficiently limit the amount of memory allocated when reading DER encoded input. A remote attacker could possibly use this flaw to make a Java application use an excessive...

August 8, 2017—KB4034664 (Monthly Rollup)

None None...

EulerOS 2.0 SP1 : java-1.8.0-openjdk (EulerOS-SA-2017-1150)

According to the versions of the java-1.8.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the DCG implementation in the RMI component of OpenJDK failed to correctly handle references. A remote attack...

RHEL 6 / 7 : java-1.8.0-openjdk (RHSA-2017:1789)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:1789 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

RHEL 4 : nss_ldap (RHSA-2008:0715)

An updated nssldap package that fixes a security issue and several bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The nssldap package contains the nssldap and pamldap modules. The nssldap module is a plug-in which allows...