248 matches found
MITM6-Kerberos-CNAME-Abuse
Kerberos Authentication Relay - CNAME Abuse Technique PoC Background This tool is the proof-of-concept for Kerberos CNAME Abuse Relay technique, based on the MITM6 tool. The research uncovered a flaw in Windows Kerberos client behavior: when a DNS CNAME record is returned, the client follows the...
pentest-book
description: - This book contains a bunch of info, scripts and knowledge used during my pentests. /home/six2dez/.pentest-book Thanks to visit this site, please consider enhance this book with some awesome tools or techniques you know, you can contact me by Telegram@six2dez, Twitter@six2dez1 or...
Kerberos-CVE-2026-27912
Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos Elevation of Privilege Vulnerability ResetNightmare - Unauthorized password reset via Kerberos Change Password protocol flaw. 📋 Details Field| Value ---|--- CVE| CVE-2026-27912 Title| Windows Kerberos Elevation of Privilege Vulnerability...
CVE-2023-21817
CVE-2023-21817 - Windows Kerberos LPE Vulnerability Checker A minimalist C++ Proof of Concept PoC / Vulnerability Checker for CVE-2023-21817. This utility helps security researchers and system administrators determine whether a Windows system is vulnerable to the Kerberos Local Privilege Escalati...
CVE-2026-69822
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69760
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69744
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69685
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69676
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...
EUVD-2026-73623
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69760
Windows Kerberos is affected by an out-of-bounds read vulnerability that allows an unauthorized, unauthenticated attacker to trigger a denial of service over the network. The vulnerability is rated CVSS 7.5 (HIGH) with a low attack complexity and no user interaction required. CISA's SSVC assessme...
CVE-2026-69685
Windows Kerberos is affected by a heap-based buffer overflow that allows an authorized attacker to locally elevate privileges . Per Microsoft, the vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and no user interaction, res...
EUVD-2026-73573
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
EUVD-2026-73071
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...
CVE-2026-69676
CVE-2026-69676 is an authentication bypass by capture-replay vulnerability in Windows Kerberos that allows an authorized attacker to achieve remote code execution over a network. The underlying mechanism involves replaying captured Kerberos authentication traffic, enabling privilege escalation be...
EUVD-2026-73065
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69822
CVE-2026-69822 is a local privilege escalation vulnerability in Windows Kerberos caused by a numeric truncation error . An authorized attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/...
EUVD-2026-73054
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69744
Windows Kerberos is affected by a null pointer dereference that allows an unauthenticated attacker to trigger a denial of service over a network . The CVSS 3.1 score is 7.5 (HIGH) , with the vector indicating low attack complexity, no privileges required, and no user interaction. The primary impa...
