Lucene search
+L

255 matches found

Kitploit
Kitploit
added 2026/09/03 7:08 a.m.34 views

certsync

certsync certsync is a new technique in order to dump NTDS remotely, but this time without DRSUAPI : it uses golden certificate and UnPAC the hash. It works in several steps: 1. Dump user list, CA informations and CRL from LDAP 2. Dump CA certificate and private key 3. Forge offline a certificate...

6AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/03 4:55 a.m.5 views

ecapture

汉字 | English eCapture旁观者: capturar contenido de texto SSL/TLS sin un certificado CA usando eBPF. !IMPORTANT Compatible con Linux/Android en x8664 kernel 4.18+ y aarch64 kernel 5.5+. Los requisitos de versión del kernel varían según la arquitectura de la CPU tanto para Linux como para Android. Se...

5.9AI score
SaveExploits0References20
Kitploit
Kitploit
added 2026/09/02 8:22 p.m.4 views

ForgeCert

ForgeCert ForgeCert utiliza la API de BouncyCastle C y un certificado de Autoridad de Certificación CA robado + clave privada para falsificar certificados para usuarios arbitrarios capaces de autenticarse en Active Directory. Este ataque está codificado como DPERSIST1 en nuestro documento técnico...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 12:19 p.m.4 views

CVE-2026-29114

CVE-2026-29114 — Certificado raíz CA del dispositivo Dahua expuesto Tipo de aviso: Divulgación de seguridad coordinada con el proveedor ID de CVE: CVE-2026-29114 Proveedor: Dahua Technology Publicado: 2026-06-10T05:44:50 UTC Última modificación: 2026-06-10T05:44:50 UTC Fuente: Centro de confianza...

2.3CVSS6AI score0.0019EPSS
SaveExploits1
Cvelist
Cvelist
added 2026/08/27 11:26 p.m.33 views

CVE-2026-78616 Dimension Stored XSS via Trusted CA Certificate Configuration

A Stored Cross-Site Scripting XSS vulnerability in WatchGuard Dimension's Trusted CA certificate configuration allows an authenticated administrator to execute arbitrary JavaScript in another authenticated administrator's web browser by saving a carefully crafted certificate...

4.8CVSS0.00186EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/19 11:56 a.m.7 views

PYSEC-2026-3677 Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority

Summary Repo under test: https://github.com/Netflix/lemur When ADMINONLYAUTHORITYCREATION=False an explicitly supported and documented configuration, POST /api/1/authorities with type=subca never verifies that the caller holds AuthorityPermission on the supplied parent authority. The parent field...

6.5CVSS5.8AI score0.00081EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/29 4:17 p.m.16 views

CVE-2026-16543

Kong Operator's embedded Kong Kubernetes Ingress Controller KIC allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. The embedded KIC collects CA-certificate Secrets across all watched namespaces using a label selector...

7.1CVSS0.0014EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/29 3:29 p.m.41 views

CVE-2026-16543

Kong Operator’s embedded Kong Kubernetes Ingress Controller (KIC) is vulnerable. A user with namespace-scoped Secret creation privileges can cause a cluster-wide denial of service by collecting CA-certificate Secrets across watched namespaces using only a label selector, with no ingress-class or ...

7.1CVSS5.9AI score0.0014EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/29 3:29 p.m.12 views

EUVD-2026-50394

Kong Operator's embedded Kong Kubernetes Ingress Controller KIC allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. The embedded KIC collects CA-certificate Secrets across all watched namespaces using a label selector...

7.1CVSS5.9AI score0.0014EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/29 3:28 p.m.15 views

EUVD-2026-50353

Kong Kubernetes Ingress Controller KIC allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. KIC collects CA-certificate Secrets across all watched namespaces using a label selector alone, without ingress-class or namespace...

7.1CVSS5.9AI score0.0014EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/29 3:28 p.m.46 views

CVE-2026-15228

Kong Kubernetes Ingress Controller (KIC) is affected by CVE-2026-15228: a user with namespace-scoped Secret creation privileges can trigger a cluster-wide Denial of Service in ingress configuration. KIC collects CA-certificate Secrets across all watched namespaces using a label selector with no i...

7.1CVSS5.9AI score0.0014EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/29 3:28 p.m.11 views

CVE-2026-15228 Kong Kubernetes Ingress Controller cluster-wide ingress configuration DoS via CA-certificate ID collision

Kong Kubernetes Ingress Controller KIC allows a user with namespace-scoped Secret creation privileges to cause a cluster-wide ingress configuration denial of service. KIC collects CA-certificate Secrets across all watched namespaces using a label selector alone, without ingress-class or namespace...

7.1CVSS5.9AI score
SaveExploits0References5
OSV
OSV
added 2026/07/16 8:09 p.m.19 views

GHSA-WVMP-6R4V-J6CV kuma-dp connects to control plane without verifying TLS certificate when no CA is configured

When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane connects with TLS peer verification disabled. The dataplane authentication token is sent over this unverified connection Impact An on-path attacker can intercept the dataplane...

5.8CVSS6.1AI score0.00119EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/07/16 7:12 p.m.17 views

kumactl connects to control plane without verifying TLS certificate when no CA is configured

When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl disables TLS verification and sends API tokens over the unverified connection Impact An attacker on the network path between the operator and the control plane can intercept user or admin A...

6.1AI score
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2026/07/16 12:00 a.m.11 views

Amazon Linux 2023 : libnetapi, libnetapi-devel, libsmbclient (ALAS2023-2026-1899)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1899 advisory. If the certificate auto-enrollment GPO is enabled on domain membersboth in Samba's smb.conf and using Windows GPME tool, a CAcertificate may be fetched using a plain HTTP connection and installedin the...

8CVSS6.1AI score0.00261EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/07/15 9:55 a.m.9 views

erlang: Erlang OTP public_key: Certificate chain forgery via improper trust chain validation

A flaw was found in Erlang OTP's publickey module. This vulnerability CWE-295, related to improper certificate validation, allows a non-Certificate Authority CA certificate to be accepted as an intermediate issuer. A remote attacker, holding an end-entity certificate issued by a trusted CA, can...

8CVSS6.1AI score0.0033EPSS
SaveExploits0References10
OSV
OSV
added 2026/07/07 4:02 p.m.11 views

PYSEC-2026-1893 Salt's salt.auth.pki module does not properly authenticate callers

The salt.auth.pki module does not properly authenticate callers. The "password" field contains a public certificate which is validated against a CA certificate by the module. This is not pki authentication, as the caller does not need access to the corresponding private key for the authentication...

6.4CVSS6.6AI score0.00139EPSS
SaveExploits0References8
OSV
OSV
added 2026/06/10 4:17 p.m.7 views

AZL-90123 CVE-2026-48860 affecting package erlang for versions less than 26.2.5.21-2

Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl inettlsdist module allows unauthenticated bypass of the distribution-over-TLS LAN allowlist. The inettlsdist:checkip/1 function, which enforces a LAN allowlist for Erlang distribution over TLS, calls inet:sockname/1 instead...

7.5CVSS5.9AI score0.00194EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/05 11:11 a.m.15 views

OESA-2026-2575 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and...

9CVSS6.5AI score0.1393EPSS
SaveExploits9References5
Microsoft CVE
Microsoft CVE
added 2026/05/31 8:01 a.m.19 views

Non-CA certificate accepted as intermediate issuer in public_key path validation

...

8CVSS5.4AI score0.0033EPSS
SaveExploits0
Rows per page
Query Builder