CVE-2026-54121

CVE-2026-54121 Certighost Questo è uno strumento proof-of-concept per dimostrare la CVE-2026-54121, nota anche come Certighost. Leggi qui https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26 per l'analisi dettagliata. Installa le dipendenze Lo proof of concept è uno script Python...

CVE-2026-54121-CertiGhost

CVE-2026-54121 Certighost - fork corretto Un fork funzionante del proof-of-concept per CVE-2026-54121, noto anche come Certighost. Ricerca originale e PoC di @H0j3n e @aniqfakhrul con analisi dettagliata su: https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26. Questo fork corregge la...

Exploit for Improper Authorization in Microsoft

CVE-2026-54121 Certighost This is a proof-of-concept tool t...

CVE-2025-27231

CVE-2025-27231 involves leakage of the LDAP Bind password in Zabbix deployments. According to connected advisories, the issue allows a Super Admin to exfiltrate the Bind password by altering the LDAP Host to a rogue server, even though the password cannot be read after saving under normal conditi...

Design/Logic Flaw

DISPUTED An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE...

Exploit for CVE-2022-44666

Microsoft Windows Contacts VCF/Contact/LDAP syslink control...

VulnCheck KEV: CVE-2018-13374

Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server...