CVE-2024-49112-PoC

CVE-2024-49112-PoC CVE-2024-49112 LDAP RCE PoC and Metasploit Module Edit: links updated last 3 copies to go Link to Download: Contact Information You can reach me at: [email protected] please dont ask me if I can provide this for free, or if I can test your target, or how to add the module ...

CVE-2024-49113

LDAP Nightmare Un exploit per CVE-2024-49113 segnalato da Yuki Chen @guhe120. Una vulnerabilità nel Lightweight Directory Access Protocol LDAP di Windows. Creato da SafeBreach Labs pubblicato il 1° gennaio 2025. Per l'analisi tecnica completa della vulnerabilità e come siamo riusciti a sfruttarla...

cve-2024-49113-ldap_nightmare_reproduction

CVE-2024-49113 — LDAP Nightmare Esecuzione di codice in remoto nel client LDAP di Windows overflow del buffer basato su heap...

metasploit-ldapnightmare

metasploit-ldapnightmare SafeBreaches CVE-2024-49113 POC LdapNightmare Integrado ao Metasploit Visão Geral Este módulo implementa o CVE-2024-49113, uma vulnerabilidade crítica no cliente LDAP do Windows que pode causar instabilidade no sistema. O módulo integra-se ao Metasploit Framework,...

CVE-2024-49112

LDAP Nightmare Un exploit per CVE-2024-49112 segnalata da Yuki Chen @guhe120. Una vulnerabilità nel protocollo Lightweight Directory Access Protocol LDAP di Windows. Creato da SafeBreach Labs pubblicato il 1° gennaio 2025. Per l'analisi tecnica completa della vulnerabilità e di come siamo riuscit...

CVE-2026-62795

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...

EUVD-2026-56388

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...

CVE-2026-62795

CVE-2026-62795 is a Windows LDAP (Lightweight Directory Access Protocol) use-after-free vulnerability that allows a remote attacker to execute code over the network. The issue is described as a remote code execution in Windows LDAP due to a use-after-free condition, enabling an unauthenticated, n...

CVE-2026-62795 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

...

CVE-2026-62785 Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

...

CVE-2026-62785

CVE-2026-62785: Heap-based buffer overflow in Windows LDAP (Lightweight Directory Access Protocol) allows unauthenticated remote code execution over the network. Affected: Windows LDAP service. Root cause: improper heap handling leading to overflow. Impact: remote code execution with high severit...

EUVD-2026-56381

Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...

Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability

Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network...

PT-2026-70537

Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description A heap-based buffer overflow in the Lightweight Directory Access Protocol LDAP allows an unauthorized attacker to execute arbitrary code over a network, potentially compromising the...

PT-2026-70544

Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description A use after free issue in the Lightweight Directory Access Protocol LDAP allows an unauthorized attacker to execute arbitrary code over a network, potentially affecting the system...

CVE-2026-57288

Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter in the Windows native ADSI authentication path, allowing unauthenticated attackers to inject LDAP wildcard characters to enumerate directory entries and to authenticate as a...

CVE-2026-57288

Jenkins Active Directory Plugin 2.41.1 and earlier does not escape the user name before building the LDAP search filter in the Windows native ADSI authentication path, allowing unauthenticated attackers to inject LDAP wildcard characters to enumerate directory entries and to authenticate as a...

Exploit for Out-of-bounds Read in Microsoft

CVE-2024-49113 — Windows LDAP DoS Vulnerability PoC Autho...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data - Accessing sensitive data - Execution of arbitrary code user privileges -...