140 matches found
rbcd-attack
Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...
CVE-2020-1472
Nach der Reproduktion gibt es einen kleinen Bug: Nach dem Neustart hängt das System ziemlich lange auf dem Anmeldebildschirm. Ich weiß nicht, ob das nur bei mir auftritt. Vorsicht bei der Ausnutzung in einer realen Umgebung In der Praxis kann man mit -use-vss und -history von secretsdump.py den...
CVE-2026-54121
CVE-2026-54121 Certighost Questo è uno strumento proof-of-concept per dimostrare la CVE-2026-54121, nota anche come Certighost. Leggi qui https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26 per l'analisi dettagliata. Installa le dipendenze Lo proof of concept è uno script Python...
CVE-2026-65777
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-56731
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-56302
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
CVE-2026-49179
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
PT-2026-70385
Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized remote attacker to execute arbitrary code over a network and...
PT-2026-70672
Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Inadequate encryption strength allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...
CVE-2026-50682
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network...
CVE-2026-55001
Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally...
CVE-2026-54119
Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-57976 Windows Active Directory Domain Services Denial of Service Vulnerability
...
CVE-2026-54119
Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-55001
CVE-2026-55001 affects Windows Active Directory / Active Directory Domain Services. The root cause is improper certificate validation within AD, enabling an authorized attacker to achieve local privilege escalation. CVSS 3.1 base score 7.8 (Local, Low complexity, Privileges Required: Low; User In...
CVE-2026-54983 Windows Active Directory Federation Services Denial of Service Vulnerability
...
CVE-2026-49164 Windows Active Directory Domain Services Remote Code Execution Vulnerability
...