Ldap — PoC Archivehttps://poc.intelseclab.com/tags/ldap/Latest proof-of-concept entries.Hugoen-usTue, 11 Aug 2026 00:00:00 +0000Active Directory — SPN Unicode Collision Detection Scanner (CVE-2026-25177)https://poc.intelseclab.com/pocs/network/2026-08-11_cve-2026-25177-ad-spn-unicode-collision-detector/Tue, 11 Aug 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-08-11_cve-2026-25177-ad-spn-unicode-collision-detector/High severity (CVSS 8.8) — network · CVE-2026-25177. Status: Patched. Affects: Microsoft Active Directory Domain Services, Service Principal Name (SPN) validation. Tags: windows, active-directory, kerberos, spn, unicode, homoglyph, privilege-escalation, detection, scanner, ldap, CWE-641, microsoft, CVE-2026-25177.networkHighwindowsactive-directorykerberosspnunicodehomoglyphprivilege-escalationdetectionscannerldapCWE-641microsoftCVE-2026-25177Adobe Experience Manager Forms XXE to JNDI RCE Scanner (CVE-2025-54253)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-54253-aem-forms-xxe-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-54253-aem-forms-xxe-rce/Critical severity (CVSS 10) — web · CVE-2025-54253. Status: Weaponized. Affects: Adobe Experience Manager (AEM) Forms (JEE). Tags: adobe, aem, aem-forms, xxe, xml-external-entity, jndi, ldap, rce, python, cve-2025-54254.webCriticaladobeaemaem-formsxxexml-external-entityjndildaprcepythoncve-2025-54254YAMCS LdapAuthModule LDAP Injection Authentication Bypass (CVE-2026-42568)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-42568-yamcs-ldap-injection/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-42568-yamcs-ldap-injection/Medium severity — network · CVE-2026-42568 / GHSA-cqh3-jg8p-336j. Status: PoC. Affects: YAMCS (org.yamcs.security.LdapAuthModule). Tags: ldap-injection, authentication-bypass, yamcs, ldap, python, cwe-90.networkMediumldap-injectionauthentication-bypassyamcsldappythoncwe-90LDAP Nightmare — Windows LDAP Client RCE/DoS (CVE-2024-49113)https://poc.intelseclab.com/pocs/network/2026-05-15_ldap-nightmare-cve-2024-49113/Fri, 15 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-05-15_ldap-nightmare-cve-2024-49113/Critical severity — network · CVE-2024-49113. Status: Weaponized. Affects: Microsoft Windows LDAP client / Netlogon interaction path. Tags: LDAP, NRPC, Windows Server, unauthenticated, DoS, potential-RCE.networkCriticalLDAPNRPCWindows ServerunauthenticatedDoSpotential-RCE