CVE-2018-13257

Blackboard Learn CAS 티켓 호스트 헤더 스푸핑 Blackboard Learn의 인증 모듈은 중앙 인증 서비스CAS 서비스 티켓 검증 중 HTTP 호스트 헤더 스푸핑에 취약합니다. CAS 서비스 티켓은 특정 서비스 만을 위해 사용되어야 하지만, Blackboard Learn은 이 서비스가 현재 인스턴스인지 제대로 확인하지 않습니다. 이로 인해 사용자가 특정 웹사이트에 대해 자신의 SSO단일 로그인 정보를 입력하고 있다고 생각하지만, 악성 웹사이트가 대신 서비스 티켓 을 사용하여 해당 사용자로 Blackboard...

kerberoast

kerberoast Kerberoast — это набор инструментов для атаки на реализации MS Kerberos. Ниже приведён краткий обзор того, что делает каждый инструмент. Извлечение всех учётных записей, используемых в качестве SPN, с помощью встроенных средств MS root@kitploit: PS C:\ setspn -T medin -Q / Запрос...

CVE-2026-15243 Improper Validation of Certificate in CAS Client

Apereo CAS Client accepts any CA-trusted certificate for any hostname, provided the URL the client is calling matches the configured allowlist or regex. An attacker with a MITM position DNS poisoning, rogue Wi-Fi, malicious proxy, etc. can provide any CA-signed certificate for a hostname that...

Malicious code in spinal-service-ticket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae35c4e4ff6906cb7d4d11279ee76155e4fe161e95d96ecea1f4e61e9a67412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2021-42278

This is a Python script for exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate a Domain Administrator DA from a standard domain user. The script uses the Impacket library to interact with the Active Directory. The script has several components: 1. samtheadmin.py: This is the main script...

VMware Enhanced Authentication Plug-in Security Vulnerability

The VMware Enhanced Authentication Plug-in is part of the VMware Horizon client from VMware, Inc. and is used to provide an additional authentication layer to enhance the security of access to VMware Horizon virtual desktops and applications. A security vulnerability exists in VMware Enhanced...

June 8, 2021 Public preview security update (KB5003645)

None None...

March 9, 2021—KB5000851 (Security-only update)

None None...

March 9, 2021—KB5000853 (Security-only update)

None None...

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

Security feature bypass

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

Kerberos KDC Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

PT-2020-4776 · Microsoft +7 · Kerberos +9

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. ...

CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

MS14-068-domain privilege escalation vulnerability summary-vulnerability warning-the black bar safety net

0x01 vulnerability of origin Said to ms14-068,have to say the silver ticket, that is, the cheque in. Cheque is a piece of tgs, that is, a service Ticket. The service ticket is the client is sent directly to the server and request the service resource. If the server is not the domain controller dc...

Kerberos 4 4.0/5 5.0 KDC Spoofing Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1616/info Kerberos is a cryptographic authentication protocol that allows users of a network to access services without transmitting cleartext passwords. A common implementation of the protocol includes a login service...

FreeBSD : krb5 -- client impersonation vulnerability (4ccbd40d-03f7-11e0-bf50-001a926c7637)

The MIT Kerberos team reports : MIT krb5 KDC may issue tickets not requested by a client, based on an attacker-chosen KrbFastArmoredReq. An authenticated remote attacker that controls a legitimate service principal could obtain a valid service ticket to itself containing valid KDC-generated...