55 matches found
ADFSDump
ADFSDump A C tool to dump all sorts of goodies from AD FS. Created by Doug Bienstock @doughsec while at Mandiant FireEye. This tool is designed to be run in conjunction with ADFSpoof. ADFSdump will output all of the information needed in order to generate security tokens using ADFSpoof. Detailed...
CVE-2026-72978
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-72978
Active Directory Federation Services (AD FS) contains a resource allocation without limits or throttling flaw that allows an unauthorized, network-based attacker to deny service . The impact is limited to availability—no confidentiality or integrity compromise. NVD scores it 7.5 (HIGH) while Micr...
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
PT-2026-87889
Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An issue exists where resources are allocated without limits or throttling, which allows an unauthorized attacker to cause a denial of service over a network...
CVE-2026-72978: Allocation of Resources Without Limits or Throttling
Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-50684: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...
CVE-2026-50411: Stack-based Buffer Overflow
Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-50324: Loop with Unreachable Exit Condition
Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...
CVE-2026-56155: Insufficient Granularity of Access Control
Insufficient granularity of access control in Active Directory Federation Services AD FS allows an authorized attacker to elevate privileges locally...
New Silver SAML Attack Evades Golden SAML Defenses in Identity Systems
Cybersecurity researchers have disclosed a new attack technique called Silver SAML that can be successful even in cases where mitigations have been applied against Golden SAML attacks. Silver SAML "enables the exploitation of SAML to launch attacks from an identity provider like Entra ID against...
Microsoft Uncovers New Post-Compromise Malware Used by Nobelium Hackers
The threat actor behind the SolarWinds supply chain attack has been linked to yet another "highly targeted" post-exploitation malware that could be used to maintain persistent access to compromised environments. Dubbed MagicWeb by Microsoft's threat intelligence teams, the development reiterates...
MagicWeb: NOBELIUM’s post-compromise trick to authenticate as anyone
Updated August 26, 2022: Added instructions to enable collection of AD FS event logs in order to search for Event ID 501, and added a new resource for AD FS audit logging in Microsoft Sentinel. Microsoft security researchers have discovered a post-compromise capability we’re calling MagicWeb, whi...
MagicWeb: NOBELIUM’s post-compromise trick to authenticate as anyone
Updated August 26, 2022: Added instructions to enable collection of AD FS event logs in order to search for Event ID 501, and added a new resource for AD FS audit logging in Microsoft Sentinel. Microsoft security researchers have discovered a post-compromise capability we’re calling MagicWeb, whi...
5 ways to connect with Microsoft Security at Identiverse 2022
Identiverse is where the industry gathers to discuss all things identity. The 2022 conference will take place June 21 to 24 in Denver, Colorado, and I’m absolutely thrilled that Microsoft will be there. At Identiverse, we’ll share how we help customers secure access in a hybrid, multicloud, and...
CVE-2021-40456
Windows AD FS Security Feature Bypass Vulnerability...
Security feature bypass
Windows AD FS Security Feature Bypass Vulnerability...
CVE-2021-40456
CVE-2021-40456 is a Windows AD FS Server vulnerability described as a security feature bypass . The affected component is Active Directory Federation Services on Windows Server; the core issue is bypassing security restrictions within AD FS. Microsoft and security advisories indicate updates/fixe...
