220 matches found
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 !TIP If the setup does not start, add t...
samba: Remote Code Execution in SAMR
A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 — SentinelCore Defensive Toolkit !Statushtt...
Vulnerabilities in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Execution of arbitrary code root/admin privileges - Execution of arbitrary code user privileges -...
Exploit for Stack-based Buffer Overflow in Microsoft
CVE-2026-41089 ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗...
April 19, 2026—KB5091157 (OS Build 26100.32698) Out-of-band
None None...
April 19, 2026—KB5091572 (OS Build 14393.9062) Out-of-band
None None...
April 19, 2026—KB5091575 (OS Build 20348.5024) Out-of-band
None None...
April 19, 2026—KB5091573 (OS Build 17763.8647) Out-of-band
None None...
April 19, 2026—KB5091571 (OS Build 25398.2276) Out-of-band
None None...
How Microsoft Defender protects high-value assets in real-world attack scenarios
In this article 1. Using asset context to strengthen detection 2. How high-value asset protection works 3. Real-world high-value asset protection scenarios 4. Protecting your HVAs 5. Learn more High-value assets including domain controllers, web servers, and identity infrastructure are frequent...
Exploit for Improper Access Control in Microsoft
🔧 CVE-2025-33073 - Simple Tool for Easy Exploitation 🚀 Get...
ToddyCat's New Hacking Tools Steal Outlook Emails and Microsoft 365 Access Tokens
The threat actor known as ToddyCat has been observed adopting new methods to obtain access to corporate email data belonging to target companies, including using a custom tool dubbed TCSectorCopy. "This attack allows them to obtain tokens for the OAuth 2.0 authorization protocol using the user's...
EUVD-2019-6007
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2019-14902
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the...
New Win-DDoS Flaws Let Attackers Turn Public Domain Controllers into DDoS Botnet via RPC, LDAP
A novel attack technique could be weaponized to rope thousands of public domain controllers DCs around the world to create a malicious botnet and use it to conduct powerful distributed denial-of-service DDoS attacks. The approach has been codenamed Win-DDoS by SafeBreach researchers Or Yair and...
New Win-DDoS Flaws Let Attackers Turn Public Domain Controllers into DDoS Botnet via RPC, LDAP
A novel attack technique could be weaponized to rope thousands of public domain controllers DCs around the world to create a malicious botnet and use it to conduct powerful distributed denial-of-service DDoS attacks. The approach has been codenamed Win-DDoS by SafeBreach researchers Or Yair and...
Linux Distros Unpatched Vulnerability : CVE-2023-4154
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only...
PT-2025-6314 · Microsoft · Digest Authentication +1
Name of the Vulnerable Software and Affected Versions: Microsoft Digest Authentication affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. It is noted that any authenticated attacker could trigger this issue on domain...
PT-2025-42432
Name of the Vulnerable Software and Affected Versions Samba versions 4.0 through 4.21.8 Samba versions 4.22.0 through 4.22.4 Samba versions 4.23.0 through 4.23.1 Description A command injection flaw exists in the front-end WINS hook handling of Samba Active Directory Domain Controllers. When the...