4698 matches found
PT-2026-77455
Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 Description A flaw in the Microsoft Active Directory component of the Oracle Identity Manager Connector allows a high privileged attacker with networ...
Stitching the Kill Chain: Detecting NTDS.dit Exfiltration with Trellix Helix Correlation
Stitching the Kill Chain: Detecting NTDS.dit Exfiltration with Trellix Helix Correlation By Adithya Chandra and Maulik Maheta · August 18, 2026 Executive Summary While attackers continuously cycle through new tooling, their underlying techniques remain remarkably consistent. Credential theft from...
EUVD-2026-58818
A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling...
CVE-2026-74241
A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling...
internal-privesc-poc
Internal Privilege Escalation POC Library This library provid...
Linux Distros Unpatched Vulnerability : CVE-2026-19550
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permissio...
DEBIAN-CVE-2026-19550
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied...
CVE-2026-19550
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied...
UBUNTU-CVE-2026-19550
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied...
CVE-2026-19550
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied...
CVE-2026-19550
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied...
CVE-2026-65777
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
CVE-2026-62818
Use after free in Active Directory Certificate Services AD CS allows an authorized attacker to execute code over a network...
CVE-2026-49179
Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...
CVE-2026-65777 Active Directory Security Feature Bypass Vulnerability
...
CVE-2026-65777
The CVE-2026-65777 entry describes a vulnerability in Windows Active Directory where inadequate encryption strength enables an authorized attacker to bypass a security feature over the network. The issue is tied to encryption robustness within Active Directory; no product version specifics, explo...
EUVD-2026-56731
Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...
CVE-2026-65777 Active Directory Security Feature Bypass Vulnerability
...
CVE-2026-62818
CVE-2026-62818 affects Microsoft Windows Active Directory Certificate Services (AD CS). The vulnerability is a use-after-free in AD CS that allows an authorized attacker to execute arbitrary code over a network. CVSS v3.1 base metrics indicate a HIGH severity (8.8) with Network attack vector, Low...