127 matches found
CVE-2020-0665
CVE-2020-0665 - SID 필터 우회 CVE-2020-0665에 대한 개념 증명으로, Active Directory 포리스트에서 SID 필터링을 우회할 수 있게 합니다 교차 포리스트 공격. 공격 요구 사항 대상 도메인 컨트롤러 머신은 2020년 2월 이후에 패치되지 않아야 합니다. 신뢰하는 포리스트의 도메인 컨트롤러를 사전에 장악해야 합니다 이 공격은 SYSTEM 사용자와 같은 높은 권한이 필요합니다. 신뢰하는 포리스트와 양방향 전이 신뢰 관계가 설정되어 있어야 합니다. 장악된 DC에 python2.7이 설치되어 있어...
CVE-2025-53786
CVE-2025-53786 漏洞利用 本项目提供了一个针对 Microsoft Exchange Server 混合部署中严重漏洞的概念验证(PoC)漏洞利用代码,该漏洞编号为 CVE-2025-53786。该漏洞允许具有本地 Exchange 服务器管理权限的攻击者提升权限,并可能同时危害本地和云环境(包括 Azure Active Directory 集成)。 免责声明: 本工具仅供教育和研究用途。严禁在生产环境中未经授权使用或用于恶意目的。作者对因使用本工具而造成的任何误用或损害概不负责。 漏洞利用: href 功能 该漏洞利用提供了多项强大功能,以演示 CVE-2025-537...
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
UBUNTU-CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
CVE-2026-11861 Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...
EUVD-2026-61055
ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration performs VAU server certificate validation in app/vau/VAUProtokoll.py without anchoring the signedvauserverpubkeys and...
CVE-1999-0539
A trust relationship exists between two Unix hosts...
CVE-1999-0583
There is a one-way or two-way trust relationship between Windows NT domains...
EUVD-1999-0566
Malware in sbrugna...
EUVD-1999-0535
Malware in sbrugna...
EUVD-1999-0513
Malware in sbrugna...
CVE-2024-44259
This issue was addressed through improved state management. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1. An attacker may be able to misuse a trust relationship to download malicious content...
CVE-2022-45597
ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validation. NOTE: the vendor does not consider this a vulnerability because the report is only about use of certificates at the application layer not the transport layer and "Certificates are exchanged in a controlled fashion between entities...
About the security content of Safari18.1
About the security content of Safari18.1 This document describes the security content of Safari 18.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
CVE-2024-44259
This issue was addressed through improved state management. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, Safari 18.1. An attacker may be able to misuse a trust relationship to download malicious content...
CVE-2024-44259
This issue was addressed through improved state management. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1. An attacker may be able to misuse a trust relationship to download malicious content...
CVE-2024-44259
CVE-2024-44259 affects Apple Safari (and related WebKit components) with the root cause described as an issue in state management that could allow an attacker to misuse a trust relationship to download malicious content. Patches are stated for macOS Sequoia 15.1, Safari 18.1, iOS 18.1, iPadOS 18....
CVE-2024-44259
This issue was addressed through improved state management. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, visionOS 2.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, Safari 18.1. An attacker may be able to misuse a trust relationship to download malicious content...
CVE-2024-44259
This issue was addressed through improved state management. This issue is fixed in Safari 18.1, iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, visionOS 2.1. An attacker may be able to misuse a trust relationship to download malicious content...
PT-2024-31085 · Apple · Ipados +5
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.7.1 iPadOS versions prior to 17.7.1 visionOS versions prior to 2.1 iOS versions prior to 18.1 iPadOS versions prior to 18.1 macOS Sequoia versions prior to 15.1 Safari versions prior to 18.1 Description: This issue wa...