704 matches found
NoPacScan
NoPacScan NoPacScanはCVE-2021-42287/CVE-2021-42278のスキャナーです。元のスクリプトよりも多くのドメインコントローラーをスキャンでき、より正確です。DNS検索msdcs.aaa.comを使用してDCをスキャンします。これはLDAPやSAMRよりも優れており、見つけたすべてのDCを自動的にスキャンします。LDAPやSAMRを使用すると、プライマリDCから削除された一部のDCを見逃す可能性があります。より正確にするために、この脆弱性に対するマイクロソフトの主要なパッチであるタイプ0x10のPACをスキャンします。...
CVE-2026-65330
CVE-2026-65330 — tmpfs setxattr PACバイパス コンポーネント: XNU VFS — defaultsetxattrdoubleagent（tmpfs VNOP） 影響を受けるバージョン: iOS / iPadOS 26.6（23G71）以前 修正バージョン: iOS / iPadOS 26.6.1（23G83） 種別: xattrハンドラポインタ署名における固定PACダイバーシファイア 影響: カーネルコンテキストからのPC制御。カーネル書き込みプリミティブと組み合わせることで完全な権限昇格が可能 クレジット 発見者: Bhaswanth...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libproxy (UTSA-2026-093161)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093161 advisory. url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length...
Critical: ipa
Issue Overview: A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name i...
Astra Linux – Vulnerability in Heimdal, KRB5
PAC parsing in MIT Kerberos 5 also known as krb5 before versions 1.19.4 and 1.20.x before version 1.20.1 contains integer overflows that may lead to remote code execution in the KDC, kadmind, or a GSS or Kerberos application server on 32-bit platforms. This results in a heap-based buffer overflow...
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
DEBIAN-CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
CVE-2026-11861
In FreeIPA, when a trust relationship with Active Directory is configured, services fail to verify the Privilege Attribute Certificate (PAC) in Kerberos TGS tickets, allowing an authenticated AD user to impersonate a client name and bypass authentication for the portal, SMB server, and LDAP direc...
CVE-2026-11861 Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
CVE-2026-11861 Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
Linux Distros Unpatched Vulnerability : CVE-2026-11861
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for...
Siemens SENTRON PAC Out-of-bounds Read (CVE-2020-13987)
The TCP/IP stack uIP in affected devices is vulnerable to out-of-bounds read when calculating the checksum for IP packets. An attacker located in the same network could trigger a Denial-of-Service condition on the device by sending a specially crafted IP packet. This plugin only works with...
Siemens SENTRON PAC Out-of-bounds Write (CVE-2020-17437)
The TCP/IP stack uIP in affected devices is vulnerable to out-of-bounds write when processing TCP packets with urgent pointer URG where the location of the TCP data payload is calculated improperly. An attacker located in the same network could trigger a Denial-of-Service condition on the device ...
SUSE CVE-2026-9887
Use after free in Proxy in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted PAC script. Chromium security severity: Critical...
org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-47141 via org.webjars.npm:vm2 (3.9.19)
org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...
org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-47139 via org.webjars.npm:vm2 (3.9.19)
org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...
org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-47140 via org.webjars.npm:vm2 (3.9.19)
org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...
org.webjars.npm:degenerator (4.0.4), org.webjars.npm:pac-resolver (6.0.2) +1 more potentially affected by CVE-2026-47210 via org.webjars.npm:vm2 (3.9.19)
org.webjars.npm:vm2 MAVEN version 3.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:vm2 and may be impacted: - org.webjars.npm:degenerator 4.0.4 - org.webjars.npm:pac-resolver 6.0.2 - org.webjars.npm:rocket.chatapps-engine 1.35.0...