241 matches found
mssqlbof
mssqlbof A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself, in C. No msodbcsql.dll, no sqloledb.dll, no .NET CLR, no PowerShell. One COFF per arch, loads into every beacon that honors the canonical Beacon API. Why SQL Server shows up on nearly every...
PassTheCert
PassTheCert Sometimes, Domain Controllers do not support PKINIT. This can be because their certificates do not have the Smart Card Logon EKU. However, several protocols, including LDAP, support Schannel, thus authentication through TLS. We created a small Proof-of-Concept tool that allows...
CVE-2026-72940
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
CVE-2026-70575
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
CVE-2026-70575
CVE-2026-70575 is a null pointer dereference in Windows Schannel (the Windows Secure Channel TLS/SSL component) that allows an authorized attacker (low privileges required) to trigger a denial of service over a network. The attack requires high complexity , no user interaction, and results in ava...
EUVD-2026-73652
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
EUVD-2026-73346
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
CVE-2026-72940
CVE-2026-72940 is a heap-based buffer overflow in Windows Schannel (Microsoft's Secure Channel/SSL library) that allows an unauthorized, remote attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R , indicating a network-re...
Windows Schannel Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
CVE-2026-62779
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...
CVE-2026-62757
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability
...
CVE-2026-62757
Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...
EUVD-2026-56649
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability
...
CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability
...
CVE-2026-62779
Windows Schannel contains a use-after-free vulnerability that enables an authenticated, local attacker to elevate privileges. Affected component is Schannel in Windows; root cause is a use-after-free defect leading to local privilege escalation. The public records do not specify patches or fixed ...
EUVD-2026-56383
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...