8356 matches found
CVE-2026-33826
🚨 CVE-2026-33826: Windows Active Directory Remote Code Execution RCE 📌 General Overview CVE-2026-33826 is a critical Remote Code Execution RCE vulnerability affecting Active Directory Domain Services AD DS. The flaw resides in the way the AD service handles malformed authentication requests throu...
cve-2026-20833-rc4-kerberos
CVE-2026-20833 — Kerberos RC4 Hardening This repository consolidates technical documentation , PowerShell scripts , Power BI dashboards , and official Microsoft references related to the progressive deprecation of RC4 in Kerberos for Active Directory environments , as part of Microsoft's security...
CVE-2022-33679_Checker
CVE-2022-33679 Checker Lightweight checker that tests whether a set of Active Directory credentials is exposed to CVE-2022-33679 Kerberos AS-REP roast without pre-authentication. The code is derived from Bdenneu/CVE-2022-33679 and keeps only the detection path—it never attempts exploitation. It...
john
John the Ripper Esta es la versión "jumbo" mejorada por la comunidad de John the Ripper. Contiene mucho código, documentación y datos aportados por desarrolladores de jumbo y la comunidad de usuarios. Es fácil agregar nuevo código a jumbo, y los requisitos de calidad son bajos, aunque últimamente...
mobileiron-exploit
Tabshell exploit with Kerberos authentication Adapted from The OWASSRF + TabShell exploit chain First, patch the pyprsp module to enable WSManStackVersion downgrading, and install the dependencies root@kitploit: $ git clone https://github.com/jborean93/pypsrp $ patch -p0 pyprsp.patch patching fil...
CVE-2026-78620
The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payload is used directly as the write destination, resulting in files being written to unintended locations on the appliance...
CVE-2026-78620 Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling
The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payload is used directly as the write destination, resulting in files being written to unintended locations on the appliance...
EUVD-2026-74178
The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payload is used directly as the write destination, resulting in files being written to unintended locations on the appliance...
CVE-2026-78620
CVE-2026-78620 affects the Okta Access Gateway , specifically its Kerberos configuration handler , which fails to validate file paths supplied in event payloads before writing file contents. Because the attacker-controlled path is used directly as the write destination, files can be written to un...
CVE-2024-24409
CVE-2024-24409 - ADManager Plus Build 7210 Elevation of Privilege Vulnerability Description The Modify Computers is a predefined role in ADManager for managing computers. If a technician user has the Modify Computers privilege over a computer, they can change the userAccountControl and...
Kerberos_CVE-2022-33679
KerberosCVE-2022-33679 REQUIREMENTS impacket==0.10.0 arc4==0.3.0 USE case: CVE-2022-33079.py -h -ts -debug -dc-ip ip address target serverName...
CVE-2026-69822
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69760
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69744
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69685
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69676
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...
EUVD-2026-73623
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69760
Windows Kerberos is affected by an out-of-bounds read vulnerability that allows an unauthorized, unauthenticated attacker to trigger a denial of service over the network. The vulnerability is rated CVSS 7.5 (HIGH) with a low attack complexity and no user interaction required. CISA's SSVC assessme...
CVE-2026-69685
Windows Kerberos is affected by a heap-based buffer overflow that allows an authorized attacker to locally elevate privileges . Per Microsoft, the vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and no user interaction, res...