103 matches found
PT-2026-70537
Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description A heap-based buffer overflow in the Lightweight Directory Access Protocol LDAP allows an unauthorized attacker to execute arbitrary code over a network, potentially compromising the...
CVE-2026-62795: Use After Free
Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...
CVE-2026-62785: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...
PT-2026-70544
Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description A use after free issue in the Lightweight Directory Access Protocol LDAP allows an unauthorized attacker to execute arbitrary code over a network, potentially affecting the system...
CVE-2024-49113 — Updated!
CVE-2024-49113 — Windows LDAP DoS Vulnerability PoC Author: SafeBreach Status: Patched Microsoft, December 2024 Patch Tuesday CVSSv3 Score: 7.5 High Bypass Windows Server and commercial EDR Author: Tim Shing Status: Unpatched CVSSv3 Score: 7.4 High ⚠️ Disclaimer This repository is for educational...
Exploit for Out-of-bounds Read in Microsoft
CVE-2024-49113 — LDAP Nightmare Windows LDAP Client Remote...
CVE-2026-57288
Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter in the Windows native ADSI authentication path, allowing unauthenticated attackers to inject LDAP wildcard characters to enumerate directory entries and to authenticate as a...
CVE-2026-57288
Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter in the Windows native ADSI authentication path, allowing unauthenticated attackers to inject LDAP wildcard characters to enumerate directory entries and to authenticate as a...
CVE-2026-34339: NULL Pointer Dereference
Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny service locally...
Exploit for Out-of-bounds Read in Microsoft
CVE-2024-49113 — Windows LDAP DoS Vulnerability PoC Autho...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data - Accessing sensitive data - Execution of arbitrary code user privileges -...
CVE-2026-21243
CVE-2026-21243 concerns a null pointer dereference in Windows LDAP (LDAP service), enabling a network-auth independent attacker to cause denial of service. The CVSSv3.1 base score is 7.5 (Attack Vector: Network, Attack Complexity: Low, Privileges Required: None, User Interaction: None, Impact: Av...
CVE-2026-21243
Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...
CVE-2026-21243: NULL Pointer Dereference
Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network...
CVE-2026-20812
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network...
CVE-2026-20812
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network...
CVE-2026-20812: Improper Input Validation
Improper input validation in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to perform tampering over a network...
EUVD-2023-25724
Malicious code in bioql PyPI...