22333 matches found
CVE-2026-41089
🚨 CVE-2026-41089 - 重大なWindows Netlogonリモートコード実行（RCE） ⚠️ 重要なWindows Netlogonの脆弱性で、認証されていないリモートコード実行をドメインコントローラーに対して可能にします。 📖 概要 CVE-2026-41089 は、Windows Netlogon サービスに影響を与える重大な脆弱性です。 この欠陥は スタックベースのバッファオーバーフロー に起因し、リモートの攻撃者が特別に細工したリクエストを脆弱なドメインコントローラーに送信することで任意のコードを実行できるようにします。 影響 リモートコード実行 RCE 認証不要...
CVE-2026-65130: Improper Neutralization of Special Elements used in an OS Command
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...
CVE-2026-65128: Improper Neutralization of Special Elements used in an SQL Command
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...
CVE-2026-65118: Improper Certificate Validation
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...
CVE-2026-65117: Use of Hard-coded Password
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
CVE-2026-65129: Improper Certificate Validation
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service...
CVE-2026-94455: Missing Authentication for Critical Function
An HTTP endpoint intended for provisioning enterprise and reseller organisations is reachable without any session. The authentication middleware is bound only to an explicit list of controllers, and the enterprise controller is not on that list, so no authentication runs for these routes. The...
CVE-2026-65125: External Control of File Name or Path
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause external control of a file name or path. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and denial of service...
CVE-2026-65115: Uncontrolled Resource Consumption
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service...
CVE-2026-65124: XML Injection (aka Blind XPath Injection)
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of this vulnerability might lead to data tampering and denial of service...
CVE-2026-65112: Uncontrolled Resource Consumption
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-65114: Missing Authentication for Critical Function
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
CVE-2026-65113: Use of Hard-coded Credentials
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure...
CVE-2026-65127: Exposure of Sensitive System Information Due to Uncleared Debug Information
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information due to uncleared debug information. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-65126: Improper Enforcement of Behavioral Workflow
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...
CVE-2026-65121: Improper Authentication
NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...
Nginx Out-of-band Security Notification (July 15, 2026)
NGINX Security Advisory: NGINX Ingress Controller vulnerability CVE-2026-55723 NGINX Ingress Controller NGINX Ingress Controller vulnerability CVE-2026-52865 NGINX Ingress Controller NGINX Agent vulnerability CVE-2026-60062 NGINX Agent, NGINX Instance Manager NGINX map directive and regex matchin...
CVE-2020-1472
CVE-2020-1472 CVE 2020-1472 検証スクリプト 前提条件: ドメインコントローラー間でWinRMが有効になっていること。 必要な権限: root@kitploit: - 子ドメインが存在する場合: エンタープライズ管理者 - 単一フォレスト、単一ドメインの場合: ドメイン管理者...
CVE-2020-1472
CVE-2020-1472 POC 最新のimpacket（netlogon構造が追加されたバージョン）をGitHubから入手する必要があります。 デフォルトでは、これによりドメインコントローラアカウントのパスワードが変更されることに注意してください。これによりDCSyncが可能になりますが、他のドメインコントローラとの通信も切断されるため、十分注意してください！ 詳細情報と元の研究はこちら エクスプロイト手順 上記のブログ/ホワイトペーパーを読んで、何をしているのか理解してください DCのIPアドレスとNetBIOS名を指定してcve-2020-1472-exploit.pyを実行しま...