10 matches found
CVE-2026-54121
CVE-2026-54121 Certighost Esta es una herramienta de prueba de concepto para demostrar CVE-2026-54121, también conocido como Certighost. Lea aquí https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26 para el análisis detallado. Instalar dependencias La prueba de concepto es un script de...
CVE-2026-54121-CertiGhost
CVE-2026-54121 Certighost - patched fork A working fork of the proof-of-concept tool for CVE-2026-54121, also known as Certighost. Original research and PoC by @H0j3n and @aniqfakhrul detailed analysis at: https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26. This fork fixes the SAN...
Exploit for Improper Authorization in Microsoft
🛡 AI Security Tool Module CVE-2026-54121: Active Directory...
Exploit for Improper Authorization in Microsoft
CVE-2026-54121 Certighost - patched fork A working fork of...
Exploit for Improper Authorization in Microsoft
CVE-2026-54121 Certighost - patched fork A working fork of...
Exploit for Improper Authorization in Microsoft
CVE-2026-54121 Certighost This is a proof-of-concept tool t...
CVE-2025-27231
CVE-2025-27231 involves leakage of the LDAP Bind password in Zabbix deployments. According to connected advisories, the issue allows a Super Admin to exfiltrate the Bind password by altering the LDAP Host to a rogue server, even though the password cannot be read after saving under normal conditi...
Design/Logic Flaw
DISPUTED An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be reentered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE...
Exploit for CVE-2022-44666
Microsoft Windows Contacts VCF/Contact/LDAP syslink control...
VulnCheck KEV: CVE-2018-13374
Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server...