Microsoft Active Directory Certificate Services CVE-2026-54121 Detection Tool

Microsoft Active Directory Certificate Services AD CS is affected by a privilege escalation vulnerability that allows an authenticated domain user to obtain a certificate capable of impersonating a Domain Controller, potentially leading to complete Active Directory compromise. This repository...

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry directory...

Exploit for Stack-based Buffer Overflow in Microsoft

🛡️ CVE-2026-41089-Netlogon-RCE - Analyze critical Windows serv...

EUVD-2026-44082

Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network...

CVE-2026-50424

Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network...

CVE-2026-50424 Windows Domain Controller Denial of Service Vulnerability

...

CVE-2026-50424 Windows Domain Controller Denial of Service Vulnerability

...

CVE-2026-50424

CVE-2026-50424 describes a denial-of-service in Windows Domain Controller caused by an untrusted pointer dereference. The vulnerability affects the Windows Domain Controller ecosystem (Active Directory Domain Services context appears in related data) and can be triggered by remote network interac...

Windows Domain Controller Denial of Service Vulnerability

Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network...

CVE-2026-50424: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network...

PT-2026-58403

Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network...

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory

Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory AD enumeration. "The script looked for the Domain Controller DC and mapped users, computers, and domains, before creating a directory and exporting ou...

Exploit for Stack-based Buffer Overflow in Microsoft

LongLogon · CVE-2026-41089 !CVE-2026-41089 · NVDhttps://i...

samba: Remote Code Execution in SAMR

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper...

CLDAP Analyzer with ASN.1 BER Encoding and Basic TLV Response Parser

This Python script implements a CLDAP Connectionless LDAP analyzer that builds and sends LDAP CLDAP discovery requests and parses responses using ASN.1 BER encoding and a basic TLV parser. It constructs a structured LDAP search request including DnsDomain, User, and NtVer filters, sends it over U...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 !TIP If the setup does not start, add t...

CVE-2026-3238

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...

CVE-2026-3238

CVE-2026-3238 affects Samba’s WINS server in AD DCs, where unauthenticated UDP packets can trigger a NULL pointer dereference and crash the WINS service. Public details confirm the issue is a denial of service vector; no exploit details are provided in the documents. Remediation publicly document...

CVE-2026-3238 Samba: denial of service against ad dc wins server

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...

EUVD-2026-35033

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...