orpheus

Orpheus Orpheus는 Kerberoasting을 위해 KDC 옵션티켓 옵션과 암호화 유형을 변경하는 수정된 버전의 Impacket GetUserSPNs.py 및 kerberosv5.py용 래퍼입니다. 참고: Orpheus는 케르베로스머리 셋 달린 개를 지나 하데스에 들어갈 수 있었던 그리스 신의 이름을 따서 지어졌습니다. 설치 / 실행 최신 버전의 Impacket을 설치해야 합니다. 이 도구는 0.10.0 릴리스에서 테스트되었습니다. 그런 다음 git clone...

EUVD-2025-210234

Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...

CVE-2025-69171

Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...

CVE-2025-69171 WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...

CVE-2025-69171 WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...

CVE-2025-69171

Technical details for CVE-2025-69171 are not provided in the supplied documents. The Initial Description notes an unauthenticated Local File Inclusion in the Orpheus theme ≤1.3, but there are no further specifics (affected versions, impact, or fixes) in the connected materials. Monitor for updates.

CVE-2025-69171: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in Orpheus = 1.3 versions...

WordPress Orpheus theme <= 1.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Orpheus versions = 1.3...

EUVD-2017-2740

Malware in sbrugna...

orpheus-music.org Cross Site Scripting vulnerability OBB-3580132

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

orpheus-music.com Cross Site Scripting vulnerability OBB-3260037

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

orpheus-music.org Cross Site Scripting vulnerability OBB-3206754

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

orpheus-music.org Cross Site Scripting vulnerability OBB-2136613

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

orpheus-reisen.ch Cross Site Scripting vulnerability OBB-1392947

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

orpheus-music.com XSS vulnerability

Open Bug Bounty ID: OBB-594893 Description| Value ---|--- Affected Website:| orpheus-music.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

BSA-2017-384

Security Advisory ID : BSA-2017-384 Component : HEIMDAL/ KERBEROS 5 Revision : 2.0: Interim OHeimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In...

Fedora 25 : heimdal (2017-5d6a9e0c9c) (Orpheus' Lyre)

Update to 7.4.0 GA release CVE-2017-11103 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Debian DLA-1027-1 : heimdal security update (Orpheus' Lyre)

Jeffrey Altman, Viktor Duchovni and Nico Williams identified a mutual authentication bypass vulnerability in Heimdal Kerberos. Also known as Orpheus' Lyre, this vulnerability could be used by an attacker to mount a service impersonation attack on the client if he's on the network path between the...

Debian DSA-3912-1 : heimdal - security update (Orpheus' Lyre)

Jeffrey Altman, Viktor Dukhovni, and Nicolas Williams reported that Heimdal, an implementation of Kerberos 5 that aims to be compatible with MIT Kerberos, trusts metadata taken from the unauthenticated plaintext Ticket, rather than the authenticated and encrypted KDC response. A man-in-the-middle...

Debian DSA-3909-1 : samba - security update (Orpheus' Lyre)

Jeffrey Altman, Viktor Duchovni and Nico Williams identified a mutual authentication bypass vulnerability in samba, the SMB/CIFS file, print, and login server. Also known as Orpheus' Lyre, this vulnerability is located in Samba Kerberos Key Distribution Center KDC-REP component and could be used ...