476 matches found
ntfstool
ntfstool NTFSTool is a forensic tool focused on NTFS volumes. It supports reading partition info MBR, partition table, VBR but also information on Master File Table, Bitlocker encrypted volume, EFS encrypted files, USN journal and more. Download the latest binaries on AppVeyor or by checking the...
EFS_CVE-2021-43217
EFS Bypass VulnerabilityCVE-2021-43217 Objective This vulnerability demonstration aimed to establish a controlled environment for simulating an EFS bypass on windows 10 through Kali Linux. The primary focus was to perform a vulnerability pentration and show the possiblity of controlling a desktop...
PetitPotam
PetitPotam NTLM Relay Attack Detection A Zeek package for detecting some attempts to trigger NTLM relay attacks via the Petit Potam exploit. This package will detect what appear to be successful and unsuccessful exploit attempts. It makes a distinction between them by examining the return code fo...
rpc2wc
RPC to WebClient The information for this code can be found at this blog post. Recommend reading before attempting to use anything here. Code for triggering WebClient through an RPC call. Since it did not end up panning out the code was never very cleaned up and very much remained in a proof of...
PetitPotam-notest
PetitPotam NTLM Relay Attack Detection A Zeek package for detecting some attempts to trigger NTLM relay attacks via the Petit Potam exploit. This package will detect what appear to be successful and unsuccessful exploit attempts. It makes a distinction between them by examining the return code fo...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.20 security and extras update
Red Hat OpenShift Container Platform release 4.22.20 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...
Amazon Linux 2023 : amazon-efs-utils (ALAS2023-2026-3333)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3333 advisory. Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations...
Important: amazon-efs-utils
Issue Overview: Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. Uncontrolled recursion in the JSON, CBOR, and XML deserializer functions emitted b...
CVE-2026-88162
Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...
CVE-2026-83683
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...
CVE-2026-83565
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
CVE-2026-83565
A buffer over-read vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-126 . While the documents confirm the existence o...
CVE-2026-88162
A vulnerability exists in the Windows Encrypting File System (EFS) due to improper authorization (CWE-863 ). This flaw allows an authorized attacker to perform local tampering . The vulnerability has been confirmed by Microsoft with a base score of 5.5 and an official fix is available. No specifi...
EUVD-2026-99593
Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...
CVE-2026-85791
A heap-based buffer overflow vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local elevation of privilege . While the documents confirm the vulnerability type and potential impact, specific details regarding the affected comp...
EUVD-2026-99359
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...