PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

A Watchguard Vulnerability That's a "Feature" - GuardLapse

projectblack.io | vulnerability | #active-directory | #smb | #sso | #ntlm-relay | #watchguard | #guardlapse
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

GuardLapse: WatchGuard's clientless AD SSO sends its AD account's authentication to any browsing device; a rogue SMB server can capture or relay the hash, reaching Domain Admin in one engagement.
Published
Collected

Related coverage

Critical · vulnerability · bishopfox.com
A Millisecond of Predictability: Why CVE-2026-11374 Is Hard to Exploit
The flaw can yield unauthenticated administrator takeover across four AD360-integrated ManageEngine products. Exploitation is targeted and timing-dependent, but the impact is critical.
Critical · vulnerability · yeswehack.com
Critical auth bypass in WordPress Azure AD SSO plugin due to missing OIDC id_token validation
CVE-2026-2628 (CVSS 9.8): missing id_token validation in a WordPress Entra ID/Azure AD SSO plugin let unauthenticated attackers sign in as any user, including admins — root cause, PoC, mitigation.
High · vulnerability · github.com
CVE-2026-24294: Windows SMB local NTLM reflection privilege-escalation PoC
The official CVSS 3.1 vector requires local low-privilege access, but attack complexity is low, no user interaction is required, and successful exploitation can fully impact confidentiality, integrity, and availability. Apply the latest Microsoft security update for each Windows release; also enforce SMB signing, restrict NTLM, and monitor for unusual local SMB relay activity. Public information currently confirms a PoC, not active exploitation in the wild.
vulnerability · ethiack.com
What’s New in Ethiack: Main Product Updates on V2.27, V2.28 and V2.29
Release notes for Ethiack V2.27–V2.29: per-user access control for hacking events, monthly email security reports, full finding bodies in Jira tickets, and SSO auto-signup.
vulnerability · horizon3.ai
From CVE-2022-33679 to Unauthenticated Kerberoasting
On September 13, 2022, a new Kerberos vulnerability was published on the Microsoft Security Response Center’s security site. It’s labeled as a Windows Kerberos…
vulnerability · horizon3.ai
CVE-2022-28219: Unauthenticated XXE to RCE and Domain Compromise in ManageEngine ADAudit Plus
CVE-2022-28219 is an unauthenticated remote code execution vulnerability affecting Zoho ManageEngine ADAudit Plus, a compliance tool used by enterprises to monitor changes to Active Directory.
Back