EIPP

EIPP 禁止パスワードリスト Entra ID Password Protection の Banned Password List（BPL）を操作するためのツールです。 グローバル BPL のエントリを含む eipp-global-bpl.txt は、2024-04-11 にダンプされました。 詳細情報: https://www.synacktiv.com/en/publications/entra-id-banned-password-lists-password-spraying-optimizations-and-defenses EIPPDecrypt...

Fortinet FSSO Collector Agent 授权问题漏洞

The Fortinet FSSO Collector Agent is a small software program from Fortinet, Inc. that notifies the N4L Managed Router when a user authenticates to the network. An authorization issue vulnerability exists in FSSO Collector that stems from the system's efforts to properly restrict access from...

FSSO Windows DC Agent [FSSO] Insecure communication between DC agent and Collector

An improper authentication vulnerability CWE-287 in FSSO Collector may allow an unauthenticated user to bypass any firewall authentication rule and access the protected network via sending specifically crafted UDP login notification packets...