CVE-2025-27740: Weak Authentication

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network...

PT-2025-15587

Name of the Vulnerable Software and Affected Versions: Active Directory Domain Services versions prior to the fixed version Description: The issue is related to improper access control in Active Directory Domain Services, allowing an authorized attacker to elevate privileges over a network. This...

CVE-2025-29810: Improper Access Control

Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network...

PT-2025-15563

Name of the Vulnerable Software and Affected Versions: Windows Active Directory Certificate Services affected versions not specified Description: The issue is related to weak authentication, allowing an authorized attacker to elevate privileges over a network. It is described as an...

Microsoft Active Directory Domain Services 访问控制错误漏洞

Microsoft Active Directory Domain Services is a key service from Microsoft Corporation USA that is used to manage and organize resources, users, computers, and other security objects in a network. An access control error vulnerability exists in Microsoft Active Directory Domain Services. An...

Microsoft Active Directory Certificate Services 安全漏洞

Microsoft Active Directory Certificate Services is a Windows Server role from Microsoft Corporation USA that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols. A security vulnerability exists in Microsoft Active Directory...

About Remote Code Execution – Veeam Backup & Replication (CVE-2025-23120) vulnerability

About Remote Code Execution - Veeam Backup & Replication CVE-2025-23120 vulnerability. Veeam B&R is a client-server software solution for centralized backup of virtual machines in VMware vSphere and Microsoft Hyper-V environments. A deserialization flaw CWE-502 lets an attacker run arbitrary code...

Active Roles Wins 2025 Cybersecurity Excellence Award for Hybrid Active Directory Protection

Alisa Viejo, United States, 25th March 2025, CyberNewsWire...

While adding Active Directory Objects In WEM Console, Organizational Units list is empty

When try to add OU in WEM Administration Console - Active Directory Objects - Machines - Add OU option shows empty organizational unit list...

ZOHO ManageEngine Analytics Plus和ZOHO ManageEngine Analytics on-premise 安全漏洞

ZOHO ManageEngine Analytics Plus and ZOHO ManageEngine Analytics on-premise are both products of ZOHO, Inc. ZOHO ManageEngine Analytics Plus is a self-service IT analytics solution. Get a better view of your IT data with rich visualizations and dashboards.ZOHO ManageEngine Analytics on-premise is...

Exploit for Observable Discrepancy in Netadmin Netadmin_Iam

Exploit Title: CVE-2024-9513 - NetAdmin IAM Allows User Enumer...

Splunk Active Directory Add-on Regular Expression DoS

The vulnerability of the Active Directory data extraction application “Splunk Supporting Add-on for Active Directory” is related to the use of a regular expression with high computational complexity. Exploiting this vulnerability could allow an attacker to cause a service failure...

Exploit for CVE-2024-49019

Exploiting CVE-2024-49019: Certificate Authority Privilege Esc...

Linux Distros Unpatched Vulnerability : CVE-2023-4154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only...

Linux Distros Unpatched Vulnerability : CVE-2020-25720

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newl...

Linux Distros Unpatched Vulnerability : CVE-2022-45141

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is...

New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials

Security vulnerabilities have been disclosed in Xerox VersaLink C7025 Multifunction printers MFPs that could allow attackers to capture authentication credentials via pass-back attacks via Lightweight Directory Access Protocol LDAP and SMB/FTP services. "This pass-back style attack leverages a...

RansomHub Becomes 2024's Top Ransomware Group, Hitting 600+ Organizations Globally

The threat actors behind the RansomHub ransomware-as-a-service RaaS scheme have been observed leveraging now-patched security flaws in Microsoft Active Directory and the Netlogon protocol to escalate privileges and gain unauthorized access to a victim network's domain controller as part of their...

CVE-2025-21351

Windows Active Directory Domain Services API Denial of Service Vulnerability...

Active Directory Domain Services DoS

The vulnerability of the application programming interface of the Active Directory Domain Services service on the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...