Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Loading CVE intelligence

Loading vulnerability catalog

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

Tool Directory

CVE-2024-49113

HighPublished

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Published: Dec 10, 2024
Updated: Jun 9, 2026
Assigning CNA: microsoft
Evidence observed: Aug 7, 2026

Primary CVSS

7.5/ 10High

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS probability estimate

83.6%

High · next 30 days

Percentile: 99.7%
Model date: Sep 21, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Sources

metasploit-ldapnightmarePoC
SafeBreaches CVE-2024-49113 POC(LdapNightmare) Integrated into Metasploit
CVE-2024-49113PoC
FYP: Reproduced CVE-2024-49113 PoC on Windows Server 2019 (ref. SafeBreach); assessed Windows EDR detection gaps and produced ISO 27001-aligned remediation report.
CVE-2024-49113-CheckerScanner
Hi, This is to check targets vulnerable for CVE-2024-49113 in bulk, faster.
CVE-2024-49113

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.

PoC

LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113

cve-2024-49113-ldap_nightmare_reproductionPoC

Reproduction of cve-2024-49113-ldap_nightmare_reproduction