279 matches found
PassTheCert
PassTheCert 時には、ドメインコントローラがPKINITをサポートしていない場合があります。これは、それらの証明書にSmart Card Logon EKUがないためです。しかし、LDAPを含むいくつかのプロトコルはSchannelをサポートしているため、TLSを介した認証が可能です。私たちは、証明書を使用してLDAP/Sサーバーに対して認証し、さまざまな攻撃アクションを実行できる小さなProof-of-Conceptツールを作成しました。 詳細は付随するブログ記事をご覧ください。...
mssqlbof
mssqlbof Microsoft SQL Server向けのBeacon Object Fileスイートです。C言語で記述され、TDS 7.4を自前でワイヤレベルで実装しています。msodbcsql.dll、sqloledb.dll、.NET CLR、PowerShellは不要です。アーキテクチャごとに1つのCOFFファイルで、標準のBeacon APIを尊重するすべてのビーコンに読み込めます。 なぜ作ったのか SQL Serverはほとんどのエンゲージメントで出現します。人々が使うツールはSQLRecon / PowerUpSQL（CLR +...
CVE-2026-72940
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
CVE-2026-70575
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
EUVD-2026-73652
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
CVE-2026-70575
CVE-2026-70575 is a null pointer dereference in Windows Schannel (the Windows Secure Channel TLS/SSL component) that allows an authorized attacker (low privileges required) to trigger a denial of service over a network. The attack requires high complexity , no user interaction, and results in ava...
CVE-2026-72940
CVE-2026-72940 is a heap-based buffer overflow in Windows Schannel (Microsoft's Secure Channel/SSL library) that allows an unauthorized, remote attacker to achieve remote code execution over a network. The CVSS v3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R , indicating a network-re...
EUVD-2026-73346
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
Windows Schannel Denial of Service Vulnerability
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
Windows Schannel Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
PT-2026-87811
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
CVE-2026-72940: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
PT-2026-87857
Name of the Vulnerable Software and Affected Versions Windows Schannel affected versions not specified Description A heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow...
CVE-2026-70575: NULL Pointer Dereference
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
JLSEC-2026-1333
curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPTSSLCIPHERLIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable in the library, which has the surprising...
The vulnerability of the Windows security package “Schannel” on Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Windows Schannel security patch relates to the possibility of memory exploitation after release. Exploiting this vulnerability could allow an attacker to increase their privileges...
CVE-2026-62779
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...
CVE-2026-62757
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-62757
Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...
