StandIn

StandIn StandIn 是一个小型 AD 后渗透工具包。StandIn 的出现是因为最近在 xforcered，我们需要一个 .NET 原生解决方案来执行基于资源的约束委派。然而，StandIn 很快膨胀，包含了大量便利功能。 我希望继续开发 StandIn，以自学更多关于目录服务编程的知识，并有望扩展一个适合 AD 后渗透工具链的工具。 路线图 贡献指南 非常欢迎贡献。请确保拉取请求包含以下内容：功能描述、简要技术说明和示例输出。 如果你有希望添加到 StandIn 但还没有提交 PR 的功能？请创建一个工单并尽可能详细地描述该功能。 待办事项 以下项目目前计划在后续版本的...

CVE-2026-13202

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

EUVD-2026-60232

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

CVE-2026-13202 HTML Injection in OTDS Swagger UI

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

CVE-2026-13202

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

CVE-2026-13202

OpenText OTDS (Directory Services) through v22.2 contains an HTML Injection flaw in the Swagger UI component. The CVSS 4.0 score is 8.6 (HIGH) with network attack vector, no authentication required, and high confidentiality/integrity impact. A proof-of-concept exists; OpenText KB0870915 and PT Se...

PT-2026-76673

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

CVE-2026-65777 Active Directory Security Feature Bypass Vulnerability

...

CVE-2026-58222

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...

PT-2026-58139

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. A heap-based buffer overflow occurs when a program...

[SECURITY] Fedora 44 Update: 389-ds-base-3.2.2-2.fc44

389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:2418-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2418-1 advisory. This update for 389-ds fixes the following issue Update to 2.2.10git229.1fa7ffdb4: - CVE-2026-9064: unbounded LDAP controls count in...

SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:2417-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2417-1 advisory. This update for 389-ds fixes the following issue Update to 2.2.10git229.1fa7ffdb4: - CVE-2026-9064: unbounded LDAP controls count in...

RHSA-2026:26599 Red Hat Security Advisory: redhat-ds:12 security update

Bulletin has no description...

CVE-2026-35312

Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware component: Virtual Directory Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise...

RHEL 8 : 389-ds:1.4 (RHSA-2026:26459)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:26459 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server a...

CVE-2026-33432

Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions up to and including 8.2.8.2, when LDAP authentication is enabled, Roxy-WI constructs an LDAP search filter by directly concatenating the user-supplied login username into the filter string without...

CVE-2026-9064

A flaw was found in 389-ds-base. The getldapmessagecontrolsext function in the LDAP server does not enforce an upper bound on the number of controls per LDAP message. A remote, unauthenticated attacker can send a specially crafted LDAP request containing hundreds of thousands of minimal controls...

Astra Linux – Vulnerability in the 389-DS-base

A access control bypass vulnerability was discovered in version 389-ds-base. This issue arises from improper handling of filters, which can lead to incorrect results. However, further analysis revealed that it actually constitutes an access control bypass. This vulnerability could allow any remot...

CVE-2026-45009

CVE-2026-45009 affects phpMyFAQ prior to 4.1.2. The issue is an insufficient authorization check in admin-api routes, allowing authenticated ordinary users to access administrative endpoints without verifying backend privileges. This can expose sensitive backend information such as dashboard vers...