SharpSpray

SharpSpray SharpSpray is a Windows domain password spraying tool written in .NET C. Introduction SharpSpray is a C port of DomainPasswordSpray with enhanced and extra capabilities. This tool uses LDAP Protocol to communicate with the Domain active directory services. Features Can operate from...

MSFinger

MSFinger - Herramienta de Identificación de Servicios de Red de Microsoft Versión: 1.0 Autor: Laurent Gaffie Empresa: Secorizon Resumen MSFinger es una herramienta de identificación de red de alto rendimiento diseñada para el reconocimiento de redes internas. Identifica rápidamente servicios de...

CVE-2022-44666

Microsoft Windows Contacts VCF/Contact/LDAP syslink コントロールの href 属性エスケープ脆弱性 CVE-2022-44666 0day. これは、John Page aka hyp3rlinxR.1 によって 4 年以上前に完全に開示された、別の忘れ去られた 0day の話です。このレポートを理解するには、私が愚かであることを考慮する必要があります :-...

ldapserver

このパッケージは開発中です。 ldapserver は、LDAPプロトコルを話すサーバーソフトウェアを構築するためのヘルパーライブラリです。これは、LDAPの代替実装、カスタムLDAPプロキシ、あるいはAPIをLDAPサーバーとして「偽装」できるまったく異なるバックエンドにもなり得ます。 このパッケージは以下をサポートしています。 すべての基本的なLDAP操作（bind、search、add、compare、modify、delete、extended） SSL StartTLS Unbindリクエストは実装されていますが、接続を閉じるために内部的に処理されます。 グレースフルな停止...

adfly

adfly LDAP 프로토콜을 사용하는 액티브 디렉토리 쿼리 도구로, 레드 팀원/침투 테스터가 사용자 자격 증명을 검증하고 AD 사용자 및 AD 그룹에 대한 정보를 검색하는 데 도움을 줍니다. AD fly는 사용자 인증 액세스 및 정보 쿼리를 위해 LDAP 프로토콜을 사용하는 도구입니다. AD fly는 연결에 LDAP을 사용하므로 인증에 유효한 계정만 필요합니다. AD fly를 사용하기 위해 AD의 일부일 필요는 없습니다. 공격자 머신에서 레드 팀원은 LDAP을 통해 Active Directory에 도달하여 작전에 필요한 정보...

log4j2-prosecutor

log4j2-prosecutor 動機 この根本的な脆弱性は CVE-2018-3149 として報告され、この記事（8u121 リリースノート） によって修正されました。 しかし、log4j2 と呼ばれる Java 用ロギングライブラリには JNDILookupCVE-2021-44228 が存在し、LDAP などのプロトコルへのアクセスが許可されていたため、古い Java バージョンではコードインジェクションが可能になっていました。 パッチ適用済みの Java バージョンはコードインジェクションを防ぐことができますが、JNDILookup は LDAP...

EUVD-2026-79389

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

CVE-2026-83057

Oracle Internet Directory (OID LDAP Server component of Oracle Fusion Middleware) is affected by a critical vulnerability (CVSS 3.1: 9.9) in supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this with low complexity and no user inter...

CVE-2026-83056

CVE-2026-83056 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability allows a low-privileged attacker with network access via LDAP to compromise the server. Due to a scope change , success...

EUVD-2026-79382

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

PT-2026-92581

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

PT-2026-92587

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via LDAP to compromise Oracle...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. Users of Samba AD can cause the server to access uninitialized data through an LDAP add or modify request, typically resulting in a segmentation fault...

The vulnerability of the OID LDAP Server component of the Oracle Internet Directory catalog service in the Oracle Fusion Middleware software platform allows a hacker to gain full control over the system.

The vulnerability of the OID LDAP Server component of the Oracle Internet Directory service in the Oracle Fusion Middleware software platform is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain full control over the system using the LDAP...

CVE-2026-61248

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

CVE-2026-61258

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

EUVD-2026-61343

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

EUVD-2026-61446

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware component: OUD Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified...

CVE-2026-62795 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

...

Important: Red Hat Security Advisory: 389-ds-base security update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...