11778 matches found
CVE-2021-44228_dockernize
CVE-2021-44228 Log4Shell 취약점 실습 환경 소개 이 프로젝트는 CVE-2021-44228 Log4Shell로 알려진 심각한 Log4j 취약점을 안전하게 실습하고 이해할 수 있는 도커화된 환경을 제공합니다. 주요 기능 안전한 도커화된 테스트 환경 사용자 정의 페이로드 테스트 기능 공격자의 LDAP 서버 및 취약한 Java 애플리케이션 포함 시작하기 root@kitploit: docker compose up --build 페이로드 테스트 1. /vulnerable/Makefile의 test 섹션에서 페이로드를...
CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter
CVE-2026-5050 – エスケープされていないフィルターによるブラインドLDAPインジェクション プログラムコード(Python + ldap3シミュレーション) root@kitploit: ldapserversim.py - Simulated LDAP authentication server from flask import Flask, request, jsonify app = Flaskname Fake user database USERS = 'admin': 'password': 'secret', 'role': 'admin', 'user':...
log4shell
Log4Shell CVE-2021-44228 — 연구 보고서 2021년 12월에 공개된 Apache Log4j 2의 치명적 원격 코드 실행 취약점인 Log4Shell 에 대한 독립형 기술 보고서입니다. 근본 원인 분석, 전체 공격 체인, 탐지/완화 지침, 그리고 격리된 로컬 랩에서 수행한 종단 간 익스플로잇 재현을 터미널 및 로그 증거와 함께 다룹니다. 실시간 보고서 보기 → 포함 내용 취약점 개요 — Log4Shell이 무엇이며 왜 치명적이었는지 기술 분석 — JndiLookup.java의 취약한 코드 경로와 4단계 공격 흐...
Log4Shell-CVE-2021-44228-PoC
Log4Shell CVE-2021-44228: 간단한 설명 Apache Log4j2 2.0-beta9 2.15.0 2.12.2, 2.12.3 및 2.3.1 릴리스는 제외 구성, 로그 메시지 및 매개변수에 사용되는 JNDI 기능은 공격자가 제어하는 LDAP 및 기타 JNDI 관련 엔드포인트로부터 보호하지 못합니다. 로그 메시지 또는 로그 메시지 매개변수를 제어할 수 있는 공격자는 메시지 조회 대체message lookup substitution가 활성화되어 있을 때 LDAP 서버에서 로드된 임의 코드를 실행할 수 있습니다...
CVE-2026-83297
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle B...
CVE-2026-83066
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...
CVE-2026-83063
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via LDAP to compromise Oracle...
CVE-2026-83056
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...
CVE-2026-83058
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...
CVE-2026-83059
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...
CVE-2026-83061
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...
CVE-2026-83062
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...
CVE-2026-83060
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...
CVE-2026-83054
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle...
CVE-2026-83055
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...
CVE-2026-83057
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle...
CVE-2026-82994
Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to...
EUVD-2026-79649
Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: BI Platform Security. Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle B...
CVE-2026-83297
CVE-2026-83297 affects the Oracle BI Publisher component of Oracle Analytics , specifically the BI Platform Security component. Supported versions impacted are 8.2.0.0.0 , 12.2.1.4.0 , and 26.01.0.0.0 . A low-privileged attacker with network access via LDAP can exploit this vulnerability with low...
EUVD-2026-79394
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...