523 matches found
Invoke-BadSuccessor.ps1
Invoke-BadSuccessor 脆弱な組織単位OUにおける委任管理サービスアカウントdMSAの作成権限を悪用して、Active Directory環境で権限を昇格させます（BadSuccessor脆弱性 – CVE-2025-53779）。 概要 Invoke-BadSuccessorは、Windows Server 2025 Active DirectoryにおけるdMSAの設定ミスと委任を悪用して、特権昇格攻撃チェーンを自動化します: 現在のユーザー（またはそのグループ）がCreateChild 権限を持っているOUを特定します。 マシンアカウント を作成または再利用します。...
CVE-2026-97311
A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specific role do not properly check for individual group visibility permissions. This allows a delegated administrator with basic search privileg...
CVE-2026-97177
A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissions are enabled, the system fails to check for specific password reset authorizations during a general user profile update. This allows a delegated administrator, who should be restricted...
Active-Directory-BadSuccessor
Active-Directory-BadSuccessor 概要 このルームでは、Active Directory の委任管理サービスアカウント dMSAs を悪用する脆弱性である BadSuccessor 権限昇格テクニックについて学びます。この攻撃により、dMSA オブジェクトを十分に制御できるユーザーは別のアカウントを偽装し、場合によってはドメイン管理者権限を獲得できる可能性があります。 ルーム情報 ルーム: https://tryhackme.com/room/adbadsuccessor 難易度: 中級 日付: 05/06/2026 バージョン: 1.0 目的:...
CVE-2026-94213
CVE-2026-94213 affects the Authorization Services component of Keycloak , an open-source identity and access management solution. The flaw resides in the policy evaluation endpoint , used by administrators to test how access policies apply to specific users. Due to missing authorization checks , ...
CVE-2026-94213 Keycloak-services: keycloak-services: authorization services policy evaluation endpoint leaks user identity
A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access management solution. The issue occurs in the policy evaluation endpoint, which is used by administrators to test how access policies apply to specific users. Due to missing authorization check...
EUVD-2026-83840
A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access management solution. The issue occurs in the policy evaluation endpoint, which is used by administrators to test how access policies apply to specific users. Due to missing authorization check...
CVE-2026-94213 Keycloak-services: keycloak-services: authorization services policy evaluation endpoint leaks user identity
A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access management solution. The issue occurs in the policy evaluation endpoint, which is used by administrators to test how access policies apply to specific users. Due to missing authorization check...
CVE-2026-94213
A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access management solution. The issue occurs in the policy evaluation endpoint, which is used by administrators to test how access policies apply to specific users. Due to missing authorization check...
CVE-2026-94213: Missing Authorization
A flaw was found in the Authorization Services component of Keycloak, an open-source identity and access management solution. The issue occurs in the policy evaluation endpoint, which is used by administrators to test how access policies apply to specific users. Due to missing authorization check...
EUVD-2026-83602
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint used for deleting user credentials does not correctly check for fine-grained reset-password permissions. This allows a delegated administrator, who should be restricted from...
CVE-2026-94001
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint used for deleting user credentials does not correctly check for fine-grained reset-password permissions. This allows a delegated administrator, who should be restricted from...
CVE-2026-94000
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The issue occurs in the group-membership endpoints where the system fails to check if a group grants administrative privileges before allowing a user to be added. This allows a delegated...
CVE-2026-94001: Missing Authorization
A flaw was found in the Admin REST API of Keycloak, an open-source identity and access management solution. The endpoint used for deleting user credentials does not correctly check for fine-grained reset-password permissions. This allows a delegated administrator, who should be restricted from...
CVE-2026-77169
A vulnerability in the team folders formerly group folders app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-level authorization controls. The workspace app enables organizations to delegate limited administrative privileges for te...
CVE-2026-77169
A vulnerability in the team folders formerly group folders app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-level authorization controls. The workspace app enables organizations to delegate limited administrative privileges for te...
EUVD-2026-82618
A vulnerability in the team folders formerly group folders app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-level authorization controls. The workspace app enables organizations to delegate limited administrative privileges for te...
CVE-2026-77169: Improper Access Control
A vulnerability in the team folders formerly group folders app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-level authorization controls. The workspace app enables organizations to delegate limited administrative privileges for te...
keycloak-services: keycloak-services: Organization invitation link exposure allows unauthorized member creation
A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface...
CVE-2026-76553 WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal
The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a path taken from stored, user-supplied data before recursively deleting the directory it resolves to, allowing users to whom an administrator has delegated a WP Import Export Lite WordPress plugin before 3.9.33 capability...