731 matches found
CVE-2026-41089-Netlogon-RCE CVE-2026-41089-PoC-(Fixed)
🚨 CVE-2026-41089: Critical Windows Netlogon RCE Unauthenticated Remote Code Execution on Active Directory Domain Controllers 🧠 Conceptual Overview I am publishing this technical breakdown of CVE-2026-41089 , an exceptionally critical vulnerability residing deep within the Windows Netlogon service...
Exploit for Improper Authorization in Microsoft
Metasploit-CVE-2026-54121-Certighost Certighost originally dis...
CVE-2026-58222 Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...
CVE-2026-58222 Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...
CVE-2026-58221
A flaw was found in Samba Active Directory Domain Controller AD DC. Improper authorization checks allow an authenticated low-privilege domain user to modify internal LDB special records through LDAP. By altering the DSDB module configuration, an attacker can bypass directory ACL enforcement on ne...
CVE-2026-41089-Netlogon-RCE — Updated!
🛡️ CVE-2026-41089-Netlogon-RCE - Analyze critical Windows service security vulnerabilities This repository provides tools to analyze and test the Netlogon vulnerability known as CVE-2026-41089. This tool helps security professionals identify if their Windows Domain Controllers face risks from this...
VulnCheck KEV: CVE-2020-1013
An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploited this vulnerability could potentially escalate permissions or perform additional privileged actions on the target machine. To exploit this vulnerability, an...
CVE-2026-58222: Improper Neutralization of Special Elements used in an LDAP Query
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...
Exploit for Improper Authorization in Microsoft
CVE-2026-54121 Certighost - patched fork A working fork of...
Exploit for Improper Authorization in Microsoft
CVE-2026-54121 Certighost - patched fork A working fork of...
Microsoft Active Directory Certificate Services CVE-2026-54121 Detection Tool
Microsoft Active Directory Certificate Services AD CS is affected by a privilege escalation vulnerability that allows an authenticated domain user to obtain a certificate capable of impersonating a Domain Controller, potentially leading to complete Active Directory compromise. This repository...
Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry directory...
Exploit for Stack-based Buffer Overflow in Microsoft
🛡️ CVE-2026-41089-Netlogon-RCE - Analyze critical Windows serv...
EUVD-2026-44082
Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network...
CVE-2026-50424
Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network...
CVE-2026-50424
CVE-2026-50424 describes a denial-of-service in Windows Domain Controller caused by an untrusted pointer dereference. The vulnerability affects the Windows Domain Controller ecosystem (Active Directory Domain Services context appears in related data) and can be triggered by remote network interac...
CVE-2026-50424 Windows Domain Controller Denial of Service Vulnerability
...
CVE-2026-50424 Windows Domain Controller Denial of Service Vulnerability
...
