Ivanti-EPM-Coercion-Vulnerabilities

Ivanti EPM 자격 증명 강제 취약점 Ivanti EPM CVE-2024-13159 및 기타 취약점에 대한 개념 증명PoC 익스플로잇으로, 릴레이 공격에 사용할 수 있도록 Ivanti EPM 머신 자격 증명을 인증 없이 강제로 획득할 수 있게 해줍니다. 블로그 게시물 심층 분석은 여기에서 확인하세요: https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities/ 사용...

MITM6-Kerberos-CNAME-Abuse

Kerberos 인증 릴레이 - CNAME 남용 기법 PoC 배경 이 도구는 MITM6 도구를 기반으로 한 Kerberos CNAME 남용 릴레이 기법의 개념 증명입니다. 연구 결과 Windows Kerberos 클라이언트 동작에서 결함이 발견되었습니다: DNS CNAME 레코드가 반환되면 클라이언트는 별칭을 따라 CNAME 호스트 이름을 SPN으로 사용하여 TGS 요청을 구성합니다. 이를 통해 DNS MITM 위치에 있는 공격자는 모든 도메인 사용자가 공격자가 선택한 서비스에 대한 Kerberos 티켓을 요청하도록 강제할 수...

blankspace

Blank Space Blank Space は、James Forshaw 氏によるCVE-2021-43893、EFSRPC 任意ファイルアップロード権限昇格のオリジナルの概念実証をリファクタリングしたものです。Blank Space は、CVE-2021-43893 のパッチが適用されていない非制約委任を使用しているリモートホスト上に任意のファイルを作成できます。ファイル作成はリモートユーザーの権限で行われるため、コード実行はやや推測的ですが、確かに可能性はあります。Blank Space は、CVE-2021-43893...

CVE-2025-55234

CVE-2025-55234 이 취약점은 공격자가 SMBServer Message Block 프로토콜에 대한 릴레이 공격을 수행할 수 있게 합니다. 성공할 경우 권한 상승EoP으로 이어져, 본질적으로 인증되지 않은 사용자가 시스템에서 더 높은 수준의 액세스 권한을 얻을 수 있게 됩니다. 작성자: Mark Mallia 이슈 이 취약점은 공격자가 SMBServer Message Block 프로토콜에 대한 릴레이 공격을 수행할 수 있게 합니다. 성공할 경우 권한 상승으로 이어져, 본질적으로 인증되지 않은 사용자가 시스템에서 더 높은...

MAL-2026-5716 Malicious code in beamz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c380f1f0fc3c5cf723cd7d92bf41c30f622aafaa633a32f0a78bf91a3a769d2a The package advertises itself as a credential-transfer CLI but implements transfer by reading the user's Anthropic Claude Code credentials...

CVE-2026-7325

Improper authorization in the Active Directory browsing feature in Devolutions Server allows a low-privileged authenticated user to obtain authentication material associated with a stored PAM provider service account via authentication relay to an attacker-controlled server. This issue affects :...

An Analysis of Attack Vectors against FIDO2 Authentication

Phishing attacks remain one of the most prevalent threats to online security, with the Anti-Phishing Working Group reporting over 890,000 attacks in Q3 2025 alone. Traditional password-based authentication is particularly vulnerable to such attacks, prompting the development of more secure...

A Relay a Day Keeps the AirTag Away: Practical Relay Attacks on Apple's AirTags

Apple AirTags use Apple's Find My network: when nearby iDevices detect a lost tag, they anonymously forward an encrypted location report to Apple, which the tag's owner can then fetch to locate the item. That encryption protects privacy -- neither the finder nor Apple learns the owner's identity ...

PT-2026-29515

A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server by manipulating a file's path during its upload. When the file is subsequently downloaded, the file in the attacker controlled pat...

CVE-2026-33697

Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...

CVE-2026-33697

Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...

EUVD-2026-16488

Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...

CVE-2026-33697

Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...

CVE-2026-33697 CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys

Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...

CVE-2026-33697 CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys

Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...

CVE-2026-33697 CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys

Cocos AI is a confidential computing system for AI. The current implementation of attested TLS aTLS in CoCoS is vulnerable to a relay attack affecting all versions from v0.4.0 through v0.8.2. This vulnerability is present in both the AMD SEV-SNP and Intel TDX deployment targets supported by CoCoS...

CVE-2026-33682 Streamlit on Windows has Unauthenticated SSRF Vulnerability (NTLM Credential Exposure)

Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Side Request Forgery SSRF vulnerability. The vulnerability arises from improper validation of attacker-supplied...

PT-2026-28509

Name of the Vulnerable Software and Affected Versions Cocos AI versions 0.4.0 through 0.8.2 Description Cocos AI, a confidential computing system for AI, has a weakness in its attested TLS aTLS implementation. This allows for a relay attack where an attacker may be able to extract the ephemeral T...

CVE-1999-0682

Microsoft Exchange 5.5 allows a remote attacker to relay email i.e. spam using encapsulated SMTP addresses, even if the anti-relaying features are enabled...

CVE-2019-7097

Adobe Dreamweaver versions 19.0 and earlier have an insecure protocol implementation vulnerability. Successful exploitation could lead to sensitive data disclosure if smb request is subject to a relay attack...