modifyCertTemplate

用途 此工具旨在帮助操作员修改ADCS证书模板，从而利用创建的易受攻击状态进行权限提升（并在之后将模板重置为之前的状态）。该工具专门针对以下场景设计：攻击者已获得对模板的WriteProperty权限，但不确定该权限适用于哪些属性。在此场景下，可以查询模板的ACL，并将适用的ACE信息与属性GUID进行交叉引用，以确定可修改的属性。 关于该工具及主题的关联博客文章。 用法 root@kitploit: usage: modifyCertTemplate.py -h -template template name -property property name -value new val...

CVE-2026-26264

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a malformed WriteProperty request can trigger a length underflow in the BACnet stack, leading to an out‑of‑bounds read and a crash DoS. The issue is in wp.c within...

CVE-2026-26264 BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a malformed WriteProperty request can trigger a length underflow in the BACnet stack, leading to an out‑of‑bounds read and a crash DoS. The issue is in wp.c within...

CVE-2026-26264

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a malformed WriteProperty request can trigger a length underflow in the BACnet stack, leading to an out‑of‑bounds read and a crash DoS. The issue is in wp.c within...

CVE-2026-26264 BACnet Stack WriteProperty decoding length underflow leads to OOB read and crash

BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0rc4 and 1.4.3rc2, a malformed WriteProperty request can trigger a length underflow in the BACnet stack, leading to an out‑of‑bounds read and a crash DoS. The issue is in wp.c within...

BACnet Stack 缓冲区错误漏洞

BACnet Stack is an open-source protocol stack for BACnet, designed for use in embedded systems, Linux, MacOS, BSD, and Windows. Versions of BACnet Stack prior to 1.5.0rc4 and 1.4.3rc2 contain a buffer error vulnerability. This vulnerability arises from handling WriteProperty requests with incorre...