4416 matches found
OESA-2023-1018 samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DC...
CVE-2022-44870
A reflected cross-site scripting XSS vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the AD Management module...
PXEThief - Set Of Tooling That Can Extract Passwords From The Operating System Deployment Functionality In Microsoft Endpoint Configuration Manager
PXEThief is a set of tooling that implements attack paths discussed at the DEF CON 30 talk Pulling Passwords out of Configuration Manager https://forum.defcon.org/node/241925 against the Operating System Deployment functionality in Microsoft Endpoint Configuration Manager or ConfigMgr, still...
CVE-2022-3614
In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation...
CVE-2022-3614
In affected versions of Octopus Deploy users of certain browsers using AD to sign-in to Octopus Server were able to bypass authentication checks and be redirected to the configured redirect url without any validation...
Octopus Deploy 输入验证错误漏洞
Octopus Deploy is an automation tool for .NET, Java, and other application development and deployment from Octopus Deploy Australia. A security vulnerability exists in Octopus Deploy that stems from the ability of users logging into certain browsers of Octopus Server using AD to bypass...
PT-2023-13457 · Microsoft · Active Directory
Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows users of certain browsers using Active Directory AD to sign-in to Octopus Server to bypass authentication checks. These users can be redirected to the configured...
Cypherhound - Terminal Application That Contains 260+ Neo4j Cyphers For BloodHound Data Sets
A Python3 terminal application that contains 260+ Neo4j cyphers for BloodHound data sets. Why? BloodHound is a staple tool for every red teamer. However, there are some negative side effects based on its design. I will cover the biggest pain points I've experienced and what this tool aims to...
2022 Annual Metasploit Wrap-Up
It's been another gangbusters year for Metasploit, and the holidays are a time to give thanks to all the people that help make our load a little bit lighter. So, while this end-of-year wrap-up is a highlight reel of the headline features and extensions that landed in Metasploit-land in 2022, we...
LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login , 5.0.2, Other
Other : 5.0.2 Exploit Check developer for new releases...
Autobloody - Tool To Automatically Exploit Active Directory Privilege Escalation Paths Shown By BloodHound
autobloody is a tool to automatically exploit Active Directory privilege escalation paths shown by BloodHound. Description This tool automates the AD privesc between two AD objects, the source the one we own and the target the one we want if a privesc path exists in BloodHound database. The...
Daas Studio An error occurred while contacting the Delivery Controller failed with unknown Error(0)
Access to DaaS Web Studio and Director is not possible with Azure AD login when Palo Alto is in use. Error "An error occurred while contacting the Delivery Controller. Accessinghttps://.xendesktop.net/citrix/orchestration/api/techpreview/me failed with 'unknown Error' 0. Accessing the URL...
AZL-34277 CVE-2022-23551 affecting package nmi for versions less than 1.8.17-1
aad-pod-identity assigns Azure Active Directory identities to Kubernetes applications and has now been deprecated as of 24 October 2022. The NMI component in AAD Pod Identity intercepts and validates token requests based on regex. In this case, a token request made with backslash in the request...
Cross site request forgery (csrf)
aad-pod-identity assigns Azure Active Directory identities to Kubernetes applications and has now been deprecated as of 24 October 2022. The NMI component in AAD Pod Identity intercepts and validates token requests based on regex. In this case, a token request made with backslash in the request...
CVE-2022-23551
CVE-2022-23551 concerns AAD Pod Identity: the NMI component could bypass validation for token requests containing a backslash (example /metadata/identity\oauth2\token/), potentially enabling a pod to access identities it should not have. The bug arises from NMI’s regex-based validation and is add...
LDAP Active Directory - trustedDomain Enumeration
Binary data ldapenumtrusteddomain.nbin...
AAD Pod Identity 安全漏洞
Microsoft AAD Pod Identity is Microsoft's Assigning Azure Active Directory Identities to Kubernetes Applications. A security vulnerability exists in AAD Pod Identity versions prior to 1.8.13 that stems from the NMI component intercepting and validating token requests based on regular expressions,...
Improper Restriction of Security Token Assignment
aad-pod-identity assigns Azure Active Directory identities to Kubernetes applications and has now been deprecated as of 24 October 2022. The NMI component in AAD Pod Identity intercepts and validates token requests based on regex. In this case, a token request made with backslash in the request...
Clean up stale Azure AD devices with script
Under normal circumstances, when powering off Azure Active Directory AAD joined non-persistent VM, MCS agent inside VM will perform Azure AD leave and remove device record from Azure Active Directory. Occasionally, the action may fail, it will leave stale device in Azure AD. Recently, Azure AD...
