254 matches found
PassTheCert
PassTheCert 有时候，域控制器不支持 PKINIT。这可能是因为他们的证书没有 Smart Card Logon EKU。然而，包括 LDAP 在内的多种协议支持 Schannel，因此可以通过 TLS 进行身份验证。我们创建了一个小型概念验证工具，允许使用证书对 LDAP/S 服务器进行身份验证，以执行不同的攻击操作。 详细信息请参阅随附的博客文章。 本仓库包含一个 C 版本，作者为 the-useless-one，以及一个 Python 版本，作者为 ThePirateWhoSmellsOfSunflowers / drm @lowercasedrm。...
mssqlbof
mssqlbof 마이크로소프트 SQL Server를 위한 Beacon Object File 제품군으로, 자체적으로 TDS 7.4를 C로 구현하여 네트워크 통신을 수행합니다. msodbcsql.dll, sqloledb.dll, .NET CLR, PowerShell이 필요 없습니다. 아키텍처당 하나의 COFF 파일이 로드되며, 표준 Beacon API를 준수하는 모든 비콘에서 실행됩니다. 배경 SQL Server는 거의 모든 엔지니어링 작업에서 등장합니다. 주로 사용되는 도구는 SQLRecon / PowerUpSQL CLR +...
CVE-2026-72940
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
CVE-2026-70575
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
CVE-2026-70575
CVE-2026-70575 is a null pointer dereference in Windows Schannel (the Windows Secure Channel TLS/SSL component) that allows an authorized attacker (low privileges required) to trigger a denial of service over a network. The attack requires high complexity , no user interaction, and results in ava...
EUVD-2026-73652
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
EUVD-2026-73346
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
CVE-2026-72940
CVE-2026-72940 is a heap-based buffer overflow in Windows Schannel (Microsoft's Secure Channel/SSL library) that allows an unauthorized, remote attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R , indicating a network-re...
Windows Schannel Denial of Service Vulnerability
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
Windows Schannel Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
CVE-2026-72940: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
PT-2026-87811
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
CVE-2026-70575: NULL Pointer Dereference
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
PT-2026-87857
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
JLSEC-2026-1333
curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPTSSLCIPHERLIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable in the library, which has the surprising...
The vulnerability of the Windows security package “Schannel” on Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Windows Schannel security patch relates to the possibility of memory exploitation after release. Exploiting this vulnerability could allow an attacker to increase their privileges...
CVE-2026-62779
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...
CVE-2026-62757
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-62757
Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...
