234 matches found
mssqlbof
mssqlbof Una suite di Beacon Object File per Microsoft SQL Server che parla TDS 7.4 direttamente sul filo, in C. Nessun msodbcsql.dll, nessun sqloledb.dll, nessun .NET CLR, nessun PowerShell. Un COFF per architettura, si carica in ogni beacon che rispetta l'API Beacon canonica. Perché SQL Server ...
PassTheCert
PassTheCert A volte, i Domain Controller non supportano PKINIT. Questo può essere perché i loro certificati non hanno l'EKU Smart Card Logon. Tuttavia, diversi protocolli, incluso LDAP, supportano Schannel, quindi l'autenticazione tramite TLS. Abbiamo creato un piccolo strumento Proof-of-Concept...
CVE-2026-62779
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...
CVE-2026-62757
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability
...
CVE-2026-62757
Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...
EUVD-2026-56649
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability
...
CVE-2026-62779
Windows Schannel contains a use-after-free vulnerability that enables an authenticated, local attacker to elevate privileges. Affected component is Schannel in Windows; root cause is a use-after-free defect leading to local privilege escalation. The public records do not specify patches or fixed ...
CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability
...
EUVD-2026-56383
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...
CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability
...
Windows Schannel Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...
Windows Schannel Elevation of Privilege Vulnerability
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...
PT-2026-70531
Name of the Vulnerable Software and Affected Versions Windows Schannel affected versions not specified Description A use-after-free condition in Windows Schannel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an applicatio...
PT-2026-70516
Name of the Vulnerable Software and Affected Versions Windows Schannel affected versions not specified Description Improper verification of cryptographic signatures in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network. Recommendations At the moment, ther...
CVE-2026-56186
Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network...
PT-2026-58603
Name of the Vulnerable Software and Affected Versions Windows Schannel affected versions not specified Description An out-of-bounds read in Windows Schannel allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about...
curl: Schannel custom-CA path skips Extended Key Usage enforcement
Hi all, We believe the Schannel custom-CA verification path in lib/vtls/schannelverify.c may skip Extended Key Usage enforcement. In particular, a certificate that chains to the trusted custom CA but contains only id-kp-clientAuth, rather than id-kp-serverAuth, may pass peer verification on Windo...
Unity Linux 20.1060e / 20.1070e Security Update: curl (UTSA-2026-017507)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017507 advisory. curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPTSSLCIPHERLIST when libcurl is built to use...