cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — Pesadelo LDAP Execução Remota de Código no Cliente LDAP do Windows Estouro de Buffer Baseado em Heap Campo| Valor ---|--- CVE| CVE-2024-49113 Apelido| Pesadelo LDAP CVSS 3.1| 9.8 — CRÍTICO CWE| CWE-122 — Estouro de Buffer Baseado em Heap Descoberto por| SafeBreach PoC publicado e...

metasploit-ldapnightmare

metasploit-ldapnightmare SafeBreaches CVE-2024-49113 POC LdapNightmare Integrado ao Metasploit Visão Geral Este módulo implementa o CVE-2024-49113, uma vulnerabilidade crítica no cliente LDAP do Windows que pode causar instabilidade no sistema. O módulo integra-se ao Metasploit Framework,...

LDAPMon

LDAPMon LDAPMon é um coletor de telemetria POC para o provedor ETW Microsoft-Windows-LDAP-Client. Uma vez iniciado, os logs serão armazenados no EventViewer. Este POC vem com um parser do Sentinel, para que, se você quiser coletar esses dados dentro de um SIEM, possa fazê-lo. Melhor utilizado...

CVE-2024-49112

LDAP Nightmare Um exploit para CVE-2024-49112 relatado por Yuki Chen @guhe120. Uma vulnerabilidade no Windows Lightweight Directory Access Protocol LDAP. Criado pela SafeBreach Labs publicado em 1º de janeiro de 2025. Para a análise técnica completa da vulnerabilidade e como conseguimos explorá-l...

SUSE CVE-2026-76578

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the underlying directory server's ACI...

ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the underlying directory server's ACI...

ipa: freeipa: FreeIPA: unauthenticated LDAP client can obtain administrator credentials via the self-managed-token ACI

A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the underlying directory server's ACI...

CLEANSTART-2026-EU32419 It was identified that the LDAP client implementation in version 2

Security vulnerability affects the keycloak package. It was identified that the LDAP client implementation in version 2...

389-ds-base: 389-ds: anonymous LDAP client can defeat SELFDN ACI bind-rule checks via empty bind DN

A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated...

CVE-2026-76560

A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated...

EUVD-2026-72400

A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated...

CVE-2026-76578

FreeIPA is affected by a critical flaw (CVSS 9.8 ) in its self-managed OTP token ACI , which does not require authentication and fails to restrict which attributes may be added alongside a token entry. Combined with a related flaw in the underlying directory server's ACI evaluation (tracked separ...

Linux Distros Unpatched Vulnerability : CVE-2026-76578

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the...

Exploit for Out-of-bounds Read in Microsoft

CVE-2024-49113 — LDAP Nightmare Windows LDAP Client Remote...

CVE-2026-57962: Uncontrolled Resource Consumption

A malicious LDAP server, which a Thunderbird user is configured to query for address-book autocomplete, can stash arbitrarily large amounts of attacker-supplied data into the Thunderbird LDAP client until it crashes due to memory exhaustion. This vulnerability was fixed in Thunderbird 152.0.1 and...

Improper Certificate Validation

The LDAP client is vulnerable to Improper Certificate Validation. The vulnerability is due to missing hostname verification during TLS server identity validation, where the LDAP client validates the certificate chain but does not verify that the certificate matches the intended LDAP server...

cve-2026-41720 - HIGH - Authentication Bypass with Empty Password in Spring LDAP

cve-2026-41720 - HIGH - Authentication Bypass with Empty Password in Spring LDAP...

CVE-2026-35563

It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the underlying code validates the certificate chain against a trusted authority, the absence of endpoint identification allows a valid...

CVE-2026-35563 Apache Directory LDAP API: LDAP client implementation does not verify if the server certificate matches the intended LDAP hostname

It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the underlying code validates the certificate chain against a trusted authority, the absence of endpoint identification allows a valid...

EUVD-2026-33569

It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname. While the underlying code validates the certificate chain against a trusted authority, the absence of endpoint identification allows a valid...