2663 matches found
CVE-2026-33693
CVE-2026-33693: SSRF via 0.0.0.0 Bypass in activitypub-federation-rust v4isinvalid CVSS 6.5 Moderate Keywords: SSRF, 0.0.0.0, IP validation bypass, activitypub-federation, Lemmy, Rust, ActivityPub Table of Contents Overview Vulnerability Details Technical Analysis Attack Chain Impact Remediation...
adfsbrute
adfsbrute A script to test credentials against Active Directory Federation Services ADFS, calculating the ADFS url of an organization and allowing password spraying or bruteforce attacks. The main idea is carrying out password spraying attacks with a random and high delay between each test and...
sharepoint-2026-poc
SharePoint /trust WS-Federation Deserialization: PoC & Detection Notes Live writeup GitHub Pages: https://sp-poc.wismansec.com/ HTML rendering of this document. Affected: SharePoint Server 2016, 2019, and Subscription Edition. Reconstruction of a SharePoint Server Subscription Edition intrusion i...
Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE
Microsoft SharePoint Server 2016, 2019, Subscription Edition = 2026.3.1 contains a remote code execution vulnerability in the WS-Federation passive sign-in endpoint /trust/default.aspx. The SharePoint authentication module SPFederationAuthenticationModuleV2 uses a deflate-only...
dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
POC-CVE-2026-32621-Apollo-Federation-XSS-Vulnerability
CVE-2026-32621 - Apollo Federation Prototype Pollution PoC Overview Field| Value ---|--- CVE| CVE-2026-32621 CVSS| 9.9 Critical CWE| CWE-1321 Prototype Pollution Affected| Apollo Federation 2.9.6, 2.10.5, 2.11.6, 2.12.3, 2.13.2 Patched| 2.9.6, 2.10.5, 2.11.6, 2.12.3, 2.13.2 GHSA|...
BIT-DOTNET-SDK-2026-96222 Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
BIT-DOTNET-2026-96222 Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
synapse
========================================================================= Synapse |support| |development| |documentation| |license| |pypi| |python| Synapse is now actively maintained at element-hq/synapse Synapse is an open-source Matrix homeserver developed from 2019 through 2023 as part of the...
dotnet8.0: Active Directory Federation Services (AD FS) Spoofing Vulnerability
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-67222
A flaw was found in rabbitmq-server. An authenticated remote attacker with policymaker privileges can exploit this issue when the Shovel or Federation plugin is enabled by supplying a specially crafted authentication mechanism value. This causes the server to permanently exhaust Erlang virtual...
Linux Distros Unpatched Vulnerability : CVE-2026-96222
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network. CVE-2026-96222...
CVE-2026-96222
Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...
CVE-2026-97788
Observable discrepancy in Active Directory Federation Services AD FS allows an unauthorized attacker to disclose information over a network...