191 matches found
CVE-2022-26923_AD-Certificate-Services
CVE-2022-26923 AD Certificate Services Date of publication : 10/05/2022 Attack complexity: Low Privileges required: Low CVSS Score : 8.1 The vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directo...
CVE-2026-54121-Certighost
🛡 AI Security Tool Module CVE-2026-54121: Active Directory Certificate Services Impersonation Certighost Official Security Audit Module for AI Security Tool Ecosystem 🌐 Web Demo • 📚 Project Website • 💬 Community Chat Website Navigation: Home • Updates • Downloads • Modules 🧠 Conceptual Overview...
Locksmith
Locksmith | | | | |/ | | | | | | || | || | | \ | | | | | | | | .--. .--. .--. /.-. '----------. /.-. '----------. /.-. '----------. '-' .---'-''-'-' '-' .--'--''-'-' '-' .--'--'-''-' '--' '--' '--' A small tool built to find and fix common misconfigurations in Active Directory Certificate...
PKINITtools
PKINIT tools This repository contains some utilities for playing with PKINIT and certificates. The tools are built on minikerberos and impacket. Accompanying blogpost with more context: https://dirkjanm.io/ntlm-relaying-to-ad-certificate-services/ Installation These tools are only compatible with...
CVE-2022-26923
CVE-2022-26923 Description This vulnerability allowed a low-privileged user to escalate privileges to domain administrator in a default Active Directory environment with the Active Directory Certificate Services AD CS server role installed. It is mainly related to the Active Directory Certificate...
TryHackMe-CVE-2022-26923
TryHackMe-CVE-2022-26923 Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services CVE-2022-26923 TryHackMe | CVE-2022-26923 Task 1 Introduction Security Update Guide - Microsoft Security Response Center TryHackMe | Active Directory Basics Certified Pre-Owned...
certipy-merged
certipy-merged This repository contains a fork of ly4k/Certipy with many open pull requests merged, made compatible with each other, and tested to a certain degree. As this is a work in progress , some features may or may not work as expected and things might break. Installation Using pipx...
CVE-2026-54121
🛡️ CVE-2026-54121 — Certighost CTI Investigation Active Directory Certificate Services Privilege Escalation / Domain Compromise Risk Created by Pratik Chhetri Report Date: 2026-07-28 📌 Executive Snapshot Field| Finding ---|--- CVE| CVE-2026-54121 Name| Certighost Vendor| Microsoft Component| Activ...
Exploit for Improper Authorization in Microsoft
certighost – NXC module for CVE-2026-54121 NetExec NXC...
Active Directory Certificate Services CA Chase Configuration Checker
The Certighost NetExec SMB module checks Active Directory Certificate Services configuration for the EDITFATTRIBUTESUBJECTALTNAME2 chase flag associated with CVE-2026-54121...
CVE-2026-83666
Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
CVE-2026-83666
A race condition vulnerability exists in Active Directory Certificate Services (AD CS) due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to perform a local privilege elevation . No specific version numbers or remediation ste...
CVE-2026-83666: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
CVE-2026-69624
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
EUVD-2026-73552
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
CVE-2026-62810: Heap-based Buffer Overflow
Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
CVE-2026-69395: Use of Externally-Controlled Format String
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...
CVE-2026-69624: Incomplete List of Disallowed Inputs
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
CVE-2026-69821: Improper Encoding or Escaping of Output
Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...