Invoke-RunAsWithCert

Invoke-RunAsWithCert Uno script PowerShell per eseguire l'autenticazione PKINIT con l'API Windows da una macchina non appartenente a un dominio. Descrizione Questo cmdlet crea una nuova sessione di accesso con il certificato specificato tramite PKINIT. È pensato per essere eseguito su una VM non...

CVE-2026-35616-check

CVE-2026-35616 Vulnerability-Assessment-Tool Ermitteln Sie gefahrlos, ob ein FortiClient EMS-Server anfällig für CVE-2026-35616 ist, ohne Störungen zu verursachen. Den vollständigen Bericht finden Sie im Bishop-Fox-Blog. Beschreibung CVE-2026-35616 ist ein Pre-Authentication-API-Bypass in...

CVE-2024-49019-rayng

Sfruttare CVE-2024-49019: Escalation di Privilegi dell'Autorità di Certificazione Panoramica CVE-2024-49019 è una vulnerabilità nei Servizi Certificati di Active Directory AD CS che consente a un attaccante di aumentare i privilegi abusando dell'autenticazione basata su certificati. Questa guida...

CVE-2022-26923-rayng

Sfruttamento di CVE-2022-26923: Escalation di Privilegi tramite Autorità di Certificazione Panoramica CVE-2022-26923 è una vulnerabilità in Active Directory Certificate Services AD CS che consente a un attaccante di aumentare i privilegi abusando dell'autenticazione basata su certificati. Questa...

watchTowr-vs-Check-Point-CVE-2026-50751

CVE-2026-50751 Un Generatore di Artefatti di Rilevamento per il bypass dell'autenticazione tramite certificato IKEv1 di Check Point Remote Access VPN. https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e Vedi il nostro post sul blog per i dettagli tecnici. Rilevamento i...

PassTheCert

PassTheCert A volte, i Domain Controller non supportano PKINIT. Questo può essere perché i loro certificati non hanno l'EKU Smart Card Logon. Tuttavia, diversi protocolli, incluso LDAP, supportano Schannel, quindi l'autenticazione tramite TLS. Abbiamo creato un piccolo strumento Proof-of-Concept...

libssh: libssh: denial of service via automatic certificate authentication loop

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service...

CVE-2026-18703

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow...

EUVD-2026-56861

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow...

SUSE SLES16 Security Update : libssh (SUSE-SU-2026:22956-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22956-1 advisory. - CVE-2026-15370: stack buffer overflow in SFTP server longname construction bsc1272162. - CVE-2026-59843: denial of service via...

BIT-OPENBAO-2026-39388 OpenBao's Certificate Authentication Allows Token Renewal With Different Certificate

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.3, OpenBao's Certificate authentication method, when a token renewal is requested and disablebinding=true is set, attempts to verify the current request's presented mTLS certificate matches the original. Toke...

Linux Distros Unpatched Vulnerability : CVE-2026-59849

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured...

CVE-2026-13067

When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This can result in unintended role assignments following MONGODB-X509 authentication. Affected scenarios require local...

CVE-2026-13067 tlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket

When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This can result in unintended role assignments following MONGODB-X509 authentication. Affected scenarios require local...

SUSE CVE-2026-59849

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service...

libssh: libssh: denial of service via automatic certificate authentication loop

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service...

CVE-2026-59849

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service...

CVE-2026-59849

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service...

CVE-2026-59849 Libssh: libssh: denial of service via automatic certificate authentication loop

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service...

CVE-2026-59849

A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication can cause libssh clients to loop indefinitely when configured certificates are missing or repeatedly rejected by a server, leading to denial of service...