MITM6-Kerberos-CNAME-Abuse

Kerberos 인증 릴레이 - CNAME 남용 기법 PoC 배경 이 도구는 MITM6 도구를 기반으로 한 Kerberos CNAME 남용 릴레이 기법의 개념 증명입니다. 연구 결과 Windows Kerberos 클라이언트 동작에서 결함이 발견되었습니다: DNS CNAME 레코드가 반환되면 클라이언트는 별칭을 따라 CNAME 호스트 이름을 SPN으로 사용하여 TGS 요청을 구성합니다. 이를 통해 DNS MITM 위치에 있는 공격자는 모든 도메인 사용자가 공격자가 선택한 서비스에 대한 Kerberos 티켓을 요청하도록 강제할 수...

RemotePotato0

RemotePotato0 업데이트 2022-10-21: RemotePotato0의 주요 익스플로잇 시나리오인 RPC- LDAP가 수정되었습니다. 자세한 내용은 다음 링크를 참조하세요 -- https://twitter.com/splintercode/status/1583555613950255104 또 다른 "수정되지 않을" Windows 권한 상승 도구로, 일반 사용자User에서 도메인 관리자Domain Admin로 권한을 높입니다. RemotePotato0은 일반 사용자User에서 도메인 관리자Domain Admin로 권한을...

CVE-2023-36884-Checker

CVE-2023-36884-Checker CVE-2023-36884 하드닝 적용 여부를 확인하는 스크립트 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 목표 이 스크립트는 Microsoft 하드닝 권장 사항이 올바르게 적용되었는지 확인합니다. Microsoft는 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 에서 다음과 같이 설명합니다: Add the following...

CentOS Linux 8.4 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1773134717)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1773134717 advisory. - When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL th...

CentOS Linux 8 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1773153207)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1773153207 advisory. - When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL...

CentOS Linux 8.5 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1773135327)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1773135327 advisory. - When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL th...

CentOS Linux 7 [TuxCare] Security Update: emacs-git / emacs-git-el / git / git-all / git-bzr / git-cvs / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1712672592)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1712672592 advisory. - gitconnectgit in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpecte...

Linux Distros Unpatched Vulnerability : CVE-2026-92164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file...

SUSE CVE-2026-92164

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

EUVD-2026-85336

Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files...

DEBIAN-CVE-2026-92164

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

CVE-2026-92164

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

UBUNTU-CVE-2026-92164

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

CVE-2026-92164

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

CVE-2026-92164

The CLI utility Streamlink is vulnerable to a local file disclosure flaw in versions prior to 8.6.0 . The HTTPSession component mounts a FileAdapter for the file scheme but fails to reject cross-protocol redirects inherited from requests.Session. An attacker controlling a remote server reachable ...

CVE-2026-92164 Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

CVE-2026-92164

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

CVE-2026-92164 Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

CVE-2026-92164

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...

PT-2026-97343

Name of the Vulnerable Software and Affected Versions Streamlink versions prior to 8.6.0 Description Streamlink is a CLI utility that pipes video streams from various services into a video player. The HTTPSession component mounts a FileAdapter for the file scheme and inherits redirect handling fr...