AutoPtT

AutoPtT AutoPtT énumère les tickets Kerberos et effectue des attaques Pass-the-Ticket PtT de manière interactive ou étape par étape. C'est une alternative autonome à Rubeus ou Mimikatz pour cette attaque, implémentée en C, C++, Crystal, Python et Rust. Vous pouvez utiliser les options suivantes :...

PT-2026-70129

Name of the Vulnerable Software and Affected Versions Ladybird Web Solution Faveo Helpdesk version 2.0.3 Description A broken access control issue exists in the v1 REST API. The API verifies if a requested ticket exists but fails to verify if the authenticated user owns that ticket. This allows a...

CVE-2026-60118 Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation Endpoint

Hi.Events before 1.11.0 contains a missing server-side visibility enforcement vulnerability that allows unauthenticated attackers to purchase hidden tickets by referencing hidden product and price IDs in order creation requests without authorization checks. Attackers can enumerate sequential hidd...

InnoGames: Impersonation and ticket id enumeration on support.innogames.com

A missing check for authorization made it possible to answer tickets owned by other users in their own name...