What Is ISPM? How It Differs from IAM, PAM, IGA, and IDaaS

Key Takeaways Identity Security Posture Management ISPM is the continuous risk and posture layer of the identity stack not a replacement for Identity and Access Management IAM, Privileged Access Management PAM, Identity Governance and Administration IGA, or Identity-as-a-Service IDaaS, but the...

detect_CVE-2026-25177

detect-CVE-2026-25177 Escáner seguro para entornos de producción que detecta la explotación de CVE-2026-25177 — la vulnerabilidad de colisión Unicode en SPN de Active Directory CVSS 8.8. Esta vulnerabilidad permite que cualquier usuario autenticado con permisos de escritura de SPN escale...

PS-CVE-2021-44228

PS-CVE-2021-44228 静态检测 Windows AD 域成员上存在漏洞的 log4j 库。 使用 @1lann 提供的检测工具二进制文件：https://github.com/1lann/log4shelldetect 先决条件 目标计算机上的管理员权限。 Active Directory PowerShell 模块。 目标计算机上的 WindowsManagementFramwork 5.1（PS 5.1）。 配置 脚本首先会在脚本文件夹中创建一个包含域内服务器的 .csv 列表。 直接运行即可，如果该文件尚不存在，它会询问你是否创建。...

Invoke-sAMSpoofing

Invoke-sAMSpoofing CVE-2021-42287/CVE-2021-42278 的 PowerShell 利用工具 目录 概述 菜单 截图 参考 概述 一个简单的脚本，用于自动利用 CVE-2021-42287/CVE-2021-42278 攻击 AD。 菜单 Invoke-sAMSpooofing Invoke-GoldenTicket Invoke-GoldenTips RemoveMachineAccount Invoke-Rubeus ADSIHound Invoke-DCSync 截图 Invoke-sAMSpooofing...

WinFlesher

就像 PingCastle 与 Bloodhound 一起出去喝酒，然后他们真的决定干点正事。 🍷 WinFlesher 是一款先进的攻击面安全评估框架，旨在分析、评估并报告复杂环境中的安全态势、攻击路径和修复策略。 WinFlesher 专为安全专业人员和网络安全审计人员设计，可在 Active Directory 和本地基础设施中自动进行漏洞发现和关键路径关联。 功能概览 WinFlesher 提供基于遥测的模块化风险管理方法： 自动发现： 实时检测主机配置、服务、计划任务、防火墙和 LSA 配置。 Active Directory 分析： 深入分析域、信任关系、组权限以及具有暴露...

EUVD-2026-74832

Parse Server versions = 9.0.0 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter. The adapter forwarded the client-supplied password to the directory without verifying that a password had been supplied, and treated any non-error response from the directory...

CVE-2026-69809

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69546

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69524

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69359

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

CVE-2026-62813

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

CVE-2026-62762

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

EUVD-2026-73609

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69809

CVE-2026-69809 is a memory leak (missing release of memory after effective lifetime) in Windows Active Directory Domain Services that allows an unauthorized, unauthenticated attacker to trigger a denial of service over the network. The CVSS 3.1 score is 7.5 (High) with vector AV:N/AC:L/PR:N/UI:N/...

CVE-2026-69546

CVE-2026-69546 is a use-after-free vulnerability in Windows Active Directory Domain Services that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 8.1 (High) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high attack comple...

EUVD-2026-73534

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-62813

CVE-2026-62813 is a use after free vulnerability in Windows Active Directory Domain Services (AD DS) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with high complexity and no user interaction required. No expl...

EUVD-2026-73372

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

EUVD-2026-73371

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-62762

CVE-2026-62762 is a null pointer dereference in Windows Active Directory Domain Services that allows an authorized attacker (low privileges required) to cause a denial of service over a network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, reflecting h...