mssqlbof

mssqlbof 一个面向 Microsoft SQL Server 的信标对象文件套件，使用 C 语言在底层直接实现 TDS 7.4 协议。无需 msodbcsql.dll、sqloledb.dll、.NET CLR 或 PowerShell。每个架构对应一个 COFF 文件，可加载到所有遵循标准信标 API 的信标中。 为什么 SQL Server 几乎出现在每一次渗透测试中。人们常用的两个工具是 SQLRecon / PowerUpSQL（CLR + PowerShell）以及任何封装了 sqlcmd.exe 的工具。这两者都会在信标内存中留下...

PassTheCert

PassTheCert A veces, los controladores de dominio no admiten PKINIT. Esto puede deberse a que sus certificados no tienen el Smart Card Logon EKU. Sin embargo, varios protocolos, incluyendo LDAP, soportan Schannel, y por lo tanto la autenticación a través de TLS. Hemos creado una pequeña herramien...

CVE-2026-72940

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-70575

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

CVE-2026-70575

CVE-2026-70575 is a null pointer dereference in Windows Schannel (the Windows Secure Channel TLS/SSL component) that allows an authorized attacker (low privileges required) to trigger a denial of service over a network. The attack requires high complexity , no user interaction, and results in ava...

EUVD-2026-73652

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

EUVD-2026-73346

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-72940

CVE-2026-72940 is a heap-based buffer overflow in Windows Schannel (Microsoft's Secure Channel/SSL library) that allows an unauthorized, remote attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R , indicating a network-re...

Windows Schannel Denial of Service Vulnerability

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

Windows Schannel Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-72940: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

PT-2026-87811

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

CVE-2026-70575: NULL Pointer Dereference

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

PT-2026-87857

Name of the Vulnerable Software and Affected Versions Windows Schannel affected versions not specified Description A heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow...

JLSEC-2026-1333

curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPTSSLCIPHERLIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable in the library, which has the surprising...

The vulnerability of the Windows security package “Schannel” on Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Schannel security patch relates to the possibility of memory exploitation after release. Exploiting this vulnerability could allow an attacker to increase their privileges...

CVE-2026-62779

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-62757

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability

...

CVE-2026-62757

Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...