213 matches found
mssqli-duet
MSSQLi-DUET - MSSQL Injection-based Domain User Enumeration Tool SQL injection script for MSSQL that extracts domain users from an Active Directory environment based on RID bruteforcing. Supports various forms of WAF bypass techniques through the implementation of SQLmap tamper functions...
SharpHound
SharpHound Get SharpHound The latest build of SharpHound will always be found here. To determine the SharpHound version compatible with a deployed BloodHound CE instance, login to BloodHound CE's web UI and click on ⚙️ Settings → Download Collectors. Then, click either the "Download SharpHound"...
Kestrel
Kestrel BloodHound shows you the path. Kestrel shows you what's already inside. Everyone maps the same thing: the attack path - who can reach Domain Admin. It's the right question, and the tools that answer it are excellent. But a graph of "who can reach whom" is blind to an entire class of...
weape
wEAPe Weape-Wireless-EAP-Extractor Script ============================================ Auto extracts EAP 802.1x user names Developed by Daniel Compton at Info-Assure Ltd https://github.com/commonexploits/weape.git Installing git clone https://github.com/commonexploits/weape.git How To Use...
CVE-2026-32996
CVE-2026-32996 A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. Check blog post post for technical details. https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC CVE-2026-32996.exe "whoami C:\pwned.txt" + Found...
CentOS Linux 6 [TuxCare] Security Update: libsmbclient / libsmbclient-devel / samba / samba-client / etc (CENTOS6:CLSA-2025:1759433716)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1759433716 advisory. - A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege...
CVE-2026-28307
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments...
CVE-2026-28307 SolarWinds Serv-U Privilege Escalation Vulnerability
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments...
EUVD-2026-46288
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments...
CVE-2026-28307 SolarWinds Serv-U Privilege Escalation Vulnerability
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments...
CVE-2026-28307
CVE-2026-28307 describes a privilege-escalation vulnerability in SolarWinds Serv-U where a domain user group can be elevated into an administrator group. The NVD/CVE listings state the impact is higher in general but lower in Windows deployments. The provided documents do not specify affected ver...
PT-2026-61966
Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U affected versions not specified Description SolarWinds Serv-U contains a privilege escalation flaw that enables a domain user group to be elevated to an administrator group. The impact of this issue is reduced in Windows...
CVE-2026-28307: Improper Access Control
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The impact is lower in Windows deployments...
VulnCheck KEV: CVE-2026-44963
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
CVE-2026-11774
An integer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, adding sizeofuint32t to a crafted SASL packet length prefix of 0xFFFFFFFC causes unsigned wraparound to zero, bypassing the nsslapd-maxsasliosize limit and leading to a heap buffer...
CVE-2026-44963
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
Veeam Backup & Replication’s vulnerability handling capabilities
Veeam has identified a vulnerability in Backup & Replication. This vulnerability allows an authenticated domain user to execute remote code on the Backup Server. As a result, an attacker with domain credentials can exploit this vulnerability to gain control over backup operations. This is a...
EUVD-2026-35868
A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...