Suborner

Suborner：隐形账户伪造者 这是什么？ 一个简单的程序，用于创建一个只有你知道的Windows账户 : 无需 net user 或 Windows 操作系统用户管理应用程序（例如 netapi32::netuseradd）即可创建隐形本地账户 适用于所有 Windows NT 机器（Windows XP 到 11，Windows Server 2003 到 2022） 通过 RID 劫持 在成功认证后冒充任何现有账户（启用或禁用） 创建一个具有管理员权限的隐形机器账户，而无需触发那个烦人的 Windows 事件日志记录其创建！ 在哪里可以看到更多？ 发布于 Black Hat US...

CVE-2026-6736

An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...

CVE-2026-6736 Authentication bypass vulnerability in GitHub Enterprise Server allowed creation of local user accounts bypassing the configured external identity provider

An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing the configured external identity provider. When external authentication was enabled, the signup endpoint did not properly enforce th...

GitHub Enterprise Server 访问控制错误漏洞

GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Prior to version 3.21 of GitHub Enterprise Server, there was an access control...

EUVD-2005-2504

Malware in sbrugna...

Terraform Enterprise Allowed Local Account Creation Bypassing SSO

Summary HashiCorp Terraform Enterprise up to v202006-1 contained a default signup page that allowed user registration even when disabled, bypassing SAML enforcement. This vulnerability, CVE-2020-15511, was fixed in v202007-1. Background Terraform Enterprise allowed single sign-on to be enabled vi...

CVE-2005-2503

Affected software: AppKit on Mac OS X 10.3.9 and 10.4.2. Vulnerability: allows attackers with physical access to create local accounts by forcing a specific error at the login window. Impact/conditions: local access; described CVSS as local, with partial confidentiality, integrity, and availabili...