218 matches found
CVE-2026-11861 Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
CVE-2026-11861
In FreeIPA, when a trust relationship with Active Directory is configured, services fail to verify the Privilege Attribute Certificate (PAC) in Kerberos TGS tickets, allowing an authenticated AD user to impersonate a client name and bypass authentication for the portal, SMB server, and LDAP direc...
EUVD-2026-63245
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
CVE-2026-11861 Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
CVE-2026-11861 Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
PT-2026-78915
Name of the Vulnerable Software and Affected Versions FreeIPA affected versions not specified Description A flaw exists when a trust relationship is configured between FreeIPA and Active Directory. Authenticated Active Directory users can bypass authentication for FreeIPA services, such as the...
Linux Distros Unpatched Vulnerability : CVE-2026-11861
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for...
Windows Kerberoast (optional Rubeus)
OPTIONAL fallback: requires Rubeus.exe for live $krb5tgs$ hashes. Prefer native post/ldap/gather/kerberoast. !/usr/bin/env python3 -- coding: utf-8 -- """Kerberoast via Rubeus loadmodule — request TGS and extract hashcat lines.""" from kittysploit import from lib.post.windows.hashloot import...
Kerberos Authentication Protocol Heap Buffer Overflow DoS
The vulnerability of the kdc/dotgsreq.c component of the Kerberos authentication protocol is related to pointer arithmetic errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
MiracleLinux 7 : krb5-1.15.1-51.el7 (AXSA:2021-2558:03)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2558:03 advisory. krb5: NULL pointer dereference in processtgsreq in kdc/dotgsreq.c via a FAST inner body that lacks server field CVE-2021-37750 Tenable has extracted the...
MiracleLinux 4 : krb5-1.10.3-10.AXS4.2 (AXSA:2013-413:02)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2013-413:02 advisory. Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of sending...
EUVD-2008-6799
Malware in sbrugna...
EUVD-2009-2917
Malware in sbrugna...
EUVD-2013-1454
Malware in sbrugna...
EUVD-2009-2916
Malware in sbrugna...
EUVD-2013-1455
Malware in sbrugna...