75 matches found
CVE-2026-62810: Heap-based Buffer Overflow
Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
PT-2026-87211
Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description A heap-based buffer overflow occurs in Active Directory Certificate Services AD CS, which allows an authorized attacker to elevate privileges locally. A heap-bas...
PT-2026-87743
Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
PT-2026-87625
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
CVE-2026-69821: Improper Encoding or Escaping of Output
Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
The vulnerability of the Active Directory Certificate Services (AD CS) service, which manages the distribution and usage of certificates, allows a perpetrator to execute arbitrary code.
The vulnerability of the Active Directory Certificate Services AD CS service, which manages distribution and usage of certificates on Windows operating systems, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing
The U.S. Cybersecurity and Infrastructure Security Agency CISA has published the results of two red team assessments it conducted simultaneously against two critical infrastructure organizations, using what it described as similar tradecraft while recording sharply different defensive outcomes...
CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
...
CVE-2026-62818 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
...
Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
Use after free in Active Directory Certificate Services AD CS allows an authorized attacker to execute code over a network...
CVE-2026-62818: Use After Free
Use after free in Active Directory Certificate Services AD CS allows an authorized attacker to execute code over a network...
CVE-2026-54121: Improper Authorization
Improper authorization in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges over a network...
CVE-2024-1243
Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for...
CVE-2024-1243
The CVE-2024-1243 entry concerns Wazuh agent for Windows prior to 4.8.0. It states improper input validation can be exploited by an attacker who controls the Wazuh server or agent key to configure the agent to connect to a malicious UNC path, leading to leakage of the machine account NetNTLMv2 ha...
CVE-2024-1243 Remote code execution and local privilege escalation in Wazuh Windows agent via NetNTLMv2 hash theft
Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for...
CVE-2025-29968: Improper Input Validation
Improper input validation in Active Directory Certificate Services AD CS allows an authorized attacker to deny service over a network...
Metasploit Wrap-Up 04/25/2025
AD CS workflow improvement with new PKCS12 features Given the increasing popularity of AD CS misconfiguration exploitation in recent years, Metasploit has been consistently improving its capabilities in this area. This week’s release introduces a new certs command to the msfconsole, enabling user...
Metasploit Wrap-Up 04/04/2025
New RCEs Metasploit added four new modules this week, including three that leverage vulnerabilities to obtain remote code execution RCE. Among these three, two leverage deserialization, showing that the exploit primitive is still going strong. The Tomcat vulnerability in particular CVE-2025-24813...
Metasploit Weekly Wrap-Up 10/18/2024
ESC15: EKUwu AD CS continues to be a popular target for penetration testers and security practitioners. The latest escalation technique hence the the ESC in ESC15 was discovered by Justin Bollinger with details being released just last week. This latest configuration flaw has common issuance...
AD CS Certificate Template Management
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'AD CS Certificate Template Management', 'Description' = %q This module can create, read, update, and delete AD CS certificate templates from a...