Certifried AD CS Machine Certificate Spoofing (CVE-2022-26923)

Exploits CVE-2022-26923: creates a machine account, clears its SPN, sets dNSHostName to match a domain controller, then enrolls an AD CS Machine template certificate via NTLM web enrollment. The resulting certificate may authenticate as the spoofed DC via PKINIT. !/usr/bin/env python3 -- coding:...

CVE-2026-50751 - User Authentication bypass on VPN Remote Access and Mobile Access in deprecated IKEv1 key exchange

Symptoms - An attacker can bypass user authentication by exploiting a logic flow weakness in the Remote Access and Mobile Access certificate validation and establish a remote access VPN connection without a valid user password. Check Point is aware of this vulnerability being exploited in the wil...

June 14, 2022—KB5014748 (Monthly Rollup)

June 14, 2022—KB5014748 Monthly Rollup Applies To Windows 7 Enterprise ESU Windows 7 Professional ESU Windows 7 Ultimate ESU Windows Server 2008 R2 Enterprise ESU Windows Server 2008 R2 Standard ESU Windows Server 2008 R2 Datacenter ESU Windows Embedded Standard 7 ESU Windows Embedded POSReady 7...

June 14, 2022—KB5014699 (OS Builds 19042.1766, 19043.1766, and 19044.1766)

June 14, 2022—KB5014699 OS Builds 19042.1766, 19043.1766, and 19044.1766 Applies To Windows Server, version 20H2, all editions Windows 10, version 21H1, all editions Windows 10, version 21H2, all editions Windows 10 Enterprise Multi-Session, version 20H2 Windows 10 Enterprise and Education, versi...