708 matches found
CVE-2020-1472-02-
Script di test per ZeroLogon Uno script Python che utilizza la libreria Impacket per testare la vulnerabilità dell'exploit Zerologon CVE-2020-1472. Tenta di eseguire il bypass dell'autenticazione Netlogon. Lo script terminerà immediatamente quando il bypass viene eseguito con successo e non...
CVE-2020-1472
Script di test per ZeroLogon Uno script Python che utilizza la libreria Impacket per testare la vulnerabilità relativa allo sfruttamento di Zerologon CVE-2020-1472. Tenta di eseguire il bypass dell'autenticazione Netlogon. Lo script terminerà immediatamente quando il bypass viene eseguito con...
PassTheCert
PassTheCert A volte, i Domain Controller non supportano PKINIT. Questo può essere perché i loro certificati non hanno l'EKU Smart Card Logon. Tuttavia, diversi protocolli, incluso LDAP, supportano Schannel, quindi l'autenticazione tramite TLS. Abbiamo creato un piccolo strumento Proof-of-Concept...
cve-2020-1472
Script di test per ZeroLogon Uno script Python che utilizza la libreria Impacket per testare la vulnerabilità dell'exploit Zerologon CVE-2020-1472. Tenta di eseguire il bypass dell'autenticazione Netlogon. Lo script terminerà immediatamente quando il bypass viene eseguito con successo e non...
Invoke-DCSync
Invoke-DCSync Invoke-DCSync Riferimento: https://adsecurity.org/?p=1729 Riferimento: https://silentbreaksecurity.com/invoke-dcsync-because-we-all-wanted-it/ Obiettivo: recuperare gli hash delle password di tutti gli account utente su un controller di dominio utilizzando la funzione DCSync di...
Astra Linux – Vulnerability in Samba
A flaw was discovered in the way that a Samba, as an Active Directory Domain Controller, can support a RODC Read-Only Domain Controller. This would allow a RODC to print administrator tickets...
CVE-2026-17614
CVE-2026-17614 affects WildFly-core in domain mode. The LocalFileRepository.getFile() and getConfigurationFile() do not ensure that resolved paths stay within the configured repository or configuration root, enabling a path traversal via crafted relative paths (e.g., ../../etc/passwd) sent throug...
EUVD-2026-52568
A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile and getConfigurationFile methods in wildfly-core/deployment-repository do not validate that the resolved file path remains within the configured repository or configuration root directories. A...
CVE-2026-17614
A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile and getConfigurationFile methods in wildfly-core/deployment-repository do not validate that the resolved file path remains within the configured repository or configuration root directories. A...
CVE-2026-17614 Wildfly-core: path traversal on wildfly domain controller
A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile and getConfigurationFile methods in wildfly-core/deployment-repository do not validate that the resolved file path remains within the configured repository or configuration root directories. A...
CVE-2026-58222 Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...
CVE-2026-58222 Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...
CVE-2026-58221
A flaw was found in Samba Active Directory Domain Controller AD DC. Improper authorization checks allow an authenticated low-privilege domain user to modify internal LDB special records through LDAP. By altering the DSDB module configuration, an attacker can bypass directory ACL enforcement on ne...
CVE-2026-41089-Netlogon-RCE — Updated!
🛡️ CVE-2026-41089-Netlogon-RCE - Analyze critical Windows service security vulnerabilities This repository provides tools to analyze and test the Netlogon vulnerability known as CVE-2026-41089. This tool helps security professionals identify if their Windows Domain Controllers face risks from this...
Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry directory...
CVE-2026-50424
Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network...
CVE-2026-50424
CVE-2026-50424 describes a denial-of-service in Windows Domain Controller caused by an untrusted pointer dereference. The vulnerability affects the Windows Domain Controller ecosystem (Active Directory Domain Services context appears in related data) and can be triggered by remote network interac...
CVE-2026-50424 Windows Domain Controller Denial of Service Vulnerability
...
