ad-ldap-enum

ad-ldap-enum ad-ldap-enum は、Active Directory からユーザー/コンピュータとそのグループメンバーシップを収集するために開発された Python スクリプトです。大規模な Active Directory 環境では、NBTEnum のようなツールでは十分な速度が得られませんでした。ドメインコントローラに対して LDAP クエリを実行することで、ad-ldap-enum は特定の Active Directory 属性を対象とし、迅速にグループメンバーシップを構築できます。 出力ファイル DomainGroupMembership.csv...

CVE-2021-1675

CVE-2021-1675 无需禁用打印后台处理程序的修复 该脚本检查微软针对CVE-2021-1675的修复是否存在，并从域中的"Pre-Windows 2000 Compatible Access"组中移除成员。 问题： 当"Pre-Windows 2000 Compatible Access"组为空时，以下功能将停止工作： LDAP连接 NPS服务器...

JetBrains YouTrack < 2026.2.18634 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.18634. It is, therefore, affected by multiple vulnerabilities: - In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation. CVE-2026-86482 - In JetBrains YouTrack befo...

CVE-2026-86482

In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation...

CVE-2026-86482

In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation...

CVE-2026-86482

JetBrains YouTrack prior to version 2026.2.18634 is affected by a privilege escalation vulnerability caused by unchecked group membership changes , allowing a low-privileged user to escalate their permissions. The flaw is exploitable over the network with low attack complexity and no user interac...

EUVD-2026-72498

In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation...

CVE-2026-86482

In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation...

CVE-2026-76578

FreeIPA is affected by a critical flaw (CVSS 9.8 ) in its self-managed OTP token ACI , which does not require authentication and fails to restrict which attributes may be added alongside a token entry. Combined with a related flaw in the underlying directory server's ACI evaluation (tracked separ...

PT-2026-86854

In JetBrains YouTrack before 2026.2.18634 unchecked group membership changes allowed privilege escalation...

CVE-2026-82633

Dolibarr versions 10.0.0 before 24.0.0 fail to perform per-object authorization checks in the Users::getGroups REST API endpoint, allowing authenticated users to retrieve group memberships of other users. Attackers can call GET /users/id/groups with arbitrary user identifiers to access group name...

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. The Samba smbd file server must map Windows group identities SIDs to Unix group IDs gids. The code responsible for this mapping contained a flaw that could allow it to read data beyond the end of the array, in the event that a negative cache entry was added to the...

CVE-2026-72534

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...

EUVD-2026-56004

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...

CVE-2026-72534 Authentik Security authentik - Privilege Escalation

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...

CVE-2026-72534 Authentik Security authentik - Privilege Escalation

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...

PT-2026-70109

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...

Excessive Iteration

Overview Affected versions of this package are vulnerable to Excessive Iteration in the HashRatchet.getint generation method of GroupKeySet, reached through PrivateMessage.unprotect, which loops while nextGeneration generation next; and caches every intermediate KeyGeneration in an unbounded...

Missing Authorization

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Missing Authorization through the user creation path in UsersResource.create and...

Missing Authorization

Overview org.keycloak:keycloak-server-spi-private is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Missing Authorization through the user creation path in UsersResource.create and...