Check-AAD-Connect-for-CVE-2021-36949-vulnerability

このスクリプトは、お使いのAzure AD ConnectがCVE-2021-36949で説明されている脆弱性の影響を受けるバージョンを実行しているかどうかを確認します。影響を受けるバージョンは1.6.4.0および2.0.3.0です。 AAD Connectがインストールされているサーバーでスクリプトを実行してください。...

EUVD-2026-93779

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...

CVE-2026-9226

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...

CVE-2026-9226

An authentication bypass vulnerability exists in the Azure AD external login flow of Devolutions Server version 2026.3.7.0 and earlier . A remote attacker can exploit this by capturing and replaying a login-session token exposed in a redirect URL, potentially leading to full account takeover . No...

CVE-2026-9226

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...

PT-2026-107110

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...

AADOutsider-py

AADOutsider-py はじめに このツールは、AADInternals のアウトサイダーとしての偵察部分を書き直したものです。 AADInternals の以下のキルチェーン機能とそのすべてのサブメソッドを再実装しています: Invoke-AADIntReconAsOutsider Invoke-AADIntUserEnumerationAsOutsider インストール pip3 install git+https://github.com/synacktiv/AADOutsider-py または python3 -m venv venv source...

AzureADAssessment

Microsoft Azure AD 평가 평가자 가이드 고객을 위해 평가를 수행하는 Microsoft 직원 또는 파트너인 경우 Wiki의 평가 가이드를 참조하세요. PowerShell 갤러리에서 설치 오류가 발생하면 이 문서 끝에 있는 FAQ 섹션을 참조하세요. Install-Module AzureADAssessment -Force -Scope CurrentUser If you have already installed the module, run the following instead to ensure you have the...

CVE-2026-59243

CVE-2026-59243 — Apache Airflow FAB Auth Manager JWT署名検証バイパス 韓国語: README.ko.md Apache勧告: https://lists.apache.org/thread/x4784l7z00tl3gw4tv2dmvoon77rxgpl 2026-07-29公開 CVEレコード: https://vulners.com/cve/CVE-2026-59243 修正バージョン: apache-airflow-providers-fab==3.7.3 分類: CWE-347、事前認証JWT署名検証バイパス → 管理者乗っ取り...

CVE-2023-3128

CVE-2023-3128 CVE-2023-3128 취약점인증 우회, Azure AD 이메일 클레임 검증 문제로 인한 Grafana 취약점에 대해 도메인이 취약한지 확인하려면 다음 Python 스크립트를 사용할 수 있습니다: !/usr/bin/env python3 import requests import argparse def checkcve20233128targeturl, verbose=False: """Check for CVE-2023-3128 vulnerability""" session = requests.Session...

PingCastleCloud

Ping Castle Cloud 중요: 소스 코드는 메인 PingCastle 프로젝트로 이동되었습니다. 이 프로젝트는 현재 보관archived 상태입니다. 소개 Ping Castle Cloud는 위험 평가와 성숙도 프레임워크에 기반한 방법론을 사용하여 AzureAD 보안 수준을 신속하게 평가하도록 설계된 도구입니다. 완벽한 평가를 목표로 하지 않으며, 오히려 효율성의 절충안을 추구합니다. Ping Castle 프로젝트에서 영감을 받았습니다. ==--O PingCastle Cloud Version 1.0.0.0 17/07/202...

Azure-AD-Incident-Response-PowerShell-Module

Azure AD 인시던트 대응 PowerShell 모듈 Azure Active Directory 인시던트 대응 PowerShell 모듈은 Azure Active Directory 제품 그룹과 Microsoft DARTDetection and Response Team가 공동으로 개발한 여러 도구를 제공하여 손상 대응을 지원합니다. 모듈을 사용하는 이유는 무엇인가요? 이 모듈은 다음과 같은 개발 목표를 충족합니다: 빠르고 쉽게 설치하고 사용할 수 있는 도구를 제공합니다: 손상 상황에서는 복잡한 구성 단계가 바람직하지 않습니다 기본...

Rocky Linux 9 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource (crlsa-2023_4030)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234030 advisory. grafana: account takeover possible when using Azure AD OAuth CVE-2023-3128 Tenable has extracted the preceding description block directly from the CIQ security...

CVE-2026-84458

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enabled, Zammad binds an incoming third-party SSO identity to an existing local account by matching the email address the identity provider reports,...

EUVD-2026-87261

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enabled, Zammad binds an incoming third-party SSO identity to an existing local account by matching the email address the identity provider reports,...

CVE-2026-84458 Zammad: Account takeover via unverified email matching during SSO auto-link

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enabled, Zammad binds an incoming third-party SSO identity to an existing local account by matching the email address the identity provider reports,...

CVE-2026-84458 Zammad: Account takeover via unverified email matching during SSO auto-link

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enabled, Zammad binds an incoming third-party SSO identity to an existing local account by matching the email address the identity provider reports,...

CVE-2026-84458 Zammad: Account takeover via unverified email matching during SSO auto-link

Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when the "Automatic account link on initial logon" setting is enabled, Zammad binds an incoming third-party SSO identity to an existing local account by matching the email address the identity provider reports,...

The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service allows attackers to bypass authentication by using a user-controlled key, enabling them to escalate their privileges.

The vulnerability of the Microsoft Azure Active Directory B2C access and identity management service relates to the bypassing of authentication processes by using a user-controlled key. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

CVE-2026-75156

Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...