296 matches found
MITM6-Kerberos-CNAME-Abuse
Kerberos Authentication Relay - CNAME Abuse Technique PoC Background This tool is the proof-of-concept for Kerberos CNAME Abuse Relay technique, based on the MITM6 tool. The research uncovered a flaw in Windows Kerberos client behavior: when a DNS CNAME record is returned, the client follows the...
pentest-book
description: - This book contains a bunch of info, scripts and knowledge used during my pentests. /home/six2dez/.pentest-book Thanks to visit this site, please consider enhance this book with some awesome tools or techniques you know, you can contact me by Telegram@six2dez, Twitter@six2dez1 or...
CVE-2026-108132
A Double free vulnerability exists in Windows Kerberos that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-415 . While no specific exploit links or internal component paths are provided in the documents, the vulnerability has a High b...
CVE-2026-70241
A Use after free vulnerability exists in Windows Kerberos that allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability. No specific exploit details or in-the-wild exploitation information are provided in...
Windows Kerberos Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2023-21817
CVE-2023-21817 - Windows Kerberos LPE Vulnerability Checker A minimalist C++ Proof of Concept PoC / Vulnerability Checker for CVE-2023-21817. This utility helps security researchers and system administrators determine whether a Windows system is vulnerable to the Kerberos Local Privilege Escalati...
Kerberos-CVE-2026-27912
Kerberos-CVE-2026-27912 CVE-2026-27912 - Windows Kerberos Elevation of Privilege Vulnerability ResetNightmare - Unauthorized password reset via Kerberos Change Password protocol flaw. 📋 Details Field| Value ---|--- CVE| CVE-2026-27912 Title| Windows Kerberos Elevation of Privilege Vulnerability...
Astra Linux – Vulnerability in Samba
Windows Kerberos Elevation of Privilege Vulnerability...
CVE-2026-69822
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69760
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69744
Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...
CVE-2026-69685
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69676
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network...
CVE-2026-69760
Windows Kerberos is affected by an out-of-bounds read vulnerability that allows an unauthorized, unauthenticated attacker to trigger a denial of service over the network. The vulnerability is rated CVSS 7.5 (HIGH) with a low attack complexity and no user interaction required. CISA's SSVC assessme...
EUVD-2026-73623
Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny service over a network...
EUVD-2026-73573
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally...
CVE-2026-69685
Windows Kerberos is affected by a heap-based buffer overflow that allows an authorized attacker to locally elevate privileges . Per Microsoft, the vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) with a local attack vector, low complexity, low privileges required, and no user interaction, res...
CVE-2026-69676
CVE-2026-69676 is an authentication bypass by capture-replay vulnerability in Windows Kerberos that allows an authorized attacker to achieve remote code execution over a network. The underlying mechanism involves replaying captured Kerberos authentication traffic, enabling privilege escalation be...