168 matches found
CVE-2026-54121
CVE-2026-54121 Certighost Esta es una herramienta de prueba de concepto para demostrar CVE-2026-54121, también conocido como Certighost. Lea aquí https://gist.github.com/H0j3n/a5ef2609b5f2944ac2390a191a534c26 para el análisis detallado. Instalar dependencias La prueba de concepto es un script de...
CVE-2020-1472
Después de la reproducción, hay un pequeño error: después de reiniciar, se queda atascado en la página de inicio de sesión durante bastante tiempo. No sé si solo me pasa a mí. Usar con precaución en entornos reales. En la práctica, se puede usar -use-vss y -history de secretsdump.py para obtener...
rbcd-attack
Abusing Kerberos Resource-Based Constrained Delegation TL;DR This repo is about a practical attack against Kerberos Resource-Based Constrained Delegation in a Windows Active Directory Domain. The difference from other common implementations is that we are launching the attack from outside of the...
JLSEC-2026-1322 sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:...
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...
PT-2026-80564
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...
CVE-2026-65777
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-56731
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-56302
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
CVE-2026-49179
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
Windows Active Directory Domain Services Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
CVE-2026-49179: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
PT-2026-70672
Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Inadequate encryption strength allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...
PT-2026-70385
Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized remote attacker to execute arbitrary code over a network and...
CVE-2026-65777: Inadequate Encryption Strength
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-44140
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network...
EUVD-2026-44010
Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally...
EUVD-2026-44018
Loop with unreachable exit condition 'infinite loop' in Windows Active Directory allows an unauthorized attacker to deny service over a network...
CVE-2026-50682
Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network...