lsawhisper-bof

LSA Whisperer BOF إصدار كائن ملف Beacon BOF لـ Cobalt Strike من LSA Whisperer — الأداة التي تتحدث مباشرة مع حزم المصادقة في Windows عبر واجهة العميل غير الموثوقة/الموثوقة LSA، دون لمس ذاكرة عملية LSASS حتى عند تمكين PPL و Credential Guard. لماذا يوجد هذا أثبت LSA Whisperer بواسطة Evan McBroom...

OESA-2026-2656 bind security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation due to improper validation of GSS message tokens. An attacker can manipulate the token data to cause unauthorized actions or access by sending specially crafted tokens. Remediation A fix was pushed into the...

OpenSSH 2.x/3.x - Kerberos 4 TGT/AFS Token Buffer Overflow

source: https://www.securityfocus.com/bid/4560/info A buffer overflow condition exists in the OpenSSH server. The condition is exploitable by attackers with valid user credentials in versions 2.9.9 and higher. Exploitation does not require valid user credentials in versions prior to 2.9.9. The...