mssqlbof

mssqlbof Un conjunto de Beacon Object Files para Microsoft SQL Server que habla directamente TDS 7.4 en el cable, en C. Sin msodbcsql.dll, sin sqloledb.dll, sin .NET CLR, sin PowerShell. Un COFF por arquitectura, se carga en cada beacon que respeta la API Beacon canónica. Por qué SQL Server apare...

PassTheCert

PassTheCert A veces, los controladores de dominio no admiten PKINIT. Esto puede deberse a que sus certificados no tienen el Smart Card Logon EKU. Sin embargo, varios protocolos, incluyendo LDAP, soportan Schannel, y por lo tanto la autenticación a través de TLS. Hemos creado una pequeña herramien...

CVE-2026-72940

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-70575

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

CVE-2026-70575

CVE-2026-70575 is a null pointer dereference in Windows Schannel (the Windows Secure Channel TLS/SSL component) that allows an authorized attacker (low privileges required) to trigger a denial of service over a network. The attack requires high complexity , no user interaction, and results in ava...

EUVD-2026-73652

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

EUVD-2026-73346

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-72940

CVE-2026-72940 is a heap-based buffer overflow in Windows Schannel (Microsoft's Secure Channel/SSL library) that allows an unauthorized, remote attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R , indicating a network-re...

Windows Schannel Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...

CVE-2026-62779

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-62757

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability

...

CVE-2026-62757

Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...

CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability

...

EUVD-2026-56649

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability

...

CVE-2026-62779

Windows Schannel contains a use-after-free vulnerability that enables an authenticated, local attacker to elevate privileges. Affected component is Schannel in Windows; root cause is a use-after-free defect leading to local privilege escalation. The public records do not specify patches or fixed ...

EUVD-2026-56383

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability

...

Windows Schannel Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...