adfsbrute

adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...

CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2026-97788

Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...

CVE-2026-96252

Improper verification of cryptographic signature in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-85319

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-85321

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-85324

Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-83674

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-83646

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an authorized attacker to perform spoofing over a network...

CVE-2026-83511

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70005

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69982

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-108131

No cwe for this issue in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-103576

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-108131

A vulnerability in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. The issue has a base severity of High (CVSS 3.1 score of 7.5), with an attack vector of Network and Low attack complexity. While the severity is high, it primarily i...

CVE-2026-103576

A URL redirection to an untrusted site (open redirect ) vulnerability exists in Active Directory Federation Services (AD FS) . This flaw allows an unauthorized attacker to perform spoofing over a network. The vulnerability is associated with CWE-601 . While a base score of 6.5 is assigned, the do...

CVE-2026-97788

An observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. The vulnerability is classified as a High severity issue with a CVSS score of 7.5. The provided documents do not specify the exact root cause, affected...

EUVD-2026-100308

Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...

CVE-2026-96252

The Active Directory Federation Services (AD FS) component is vulnerable to an improper verification of cryptographic signature . This flaw allows an unauthorized attacker to perform spoofing over a network, effectively enabling them to act as another user . The vulnerability has a CVSS 3.1 score...