Windows SPNEGO Nightmare: Critical RCE Vulnerability

Comments (1)

tatersolid · 21h ago

Looks to be reachable through many service ports, including http/https in at least some circumstances. I have not seen reliable information if default configurations of IIS are exploitable.

Full AI-Based Workflow

Ask HN: How did Soham Parekh get so many jobs?

Tell HN: I Lost Joy of Programming

Co-founder exiting after pivot – what's a fair exit package?

Ask HN: Does your on-call rotation suck? Can I join it?

Ask HN: Bug Bounty Dilemma – Take the $$ and Sign an NDA or Go Public?

Ask HN: New RevOps guy wants to switch us from M365 to GSuite+Slack

Ask HN: People who work different timezones than your company. How sched?

Google fails to dismiss wiretapping claims on SJ, settles with app users

Ask HN: What's Your Experience with Vibe Coding?

What's your experience using Lynx (mobile framework)?

Ask HN: What are some cool or underrated tech companies based in Australia?

Ask HN: Worth leaving position over push to adopt vibe coding?

Ask HN: Any resources for finding non-smart appliances?

Ask HN: What's the verdict on GPT wrapper companies these days?

Pocket LLM Server Just Like a Pocket WiFi

Ask HN: Has anyone else learned English just by reading tech posts (like HN)?

Agentic terminology doesn't make any sense

Ask HN: Advice for Starting a Hacker Space?

Ask HN: Do you think a new alternative to MCP would be useful?

Ask HN: What's the greatest piece of non-dogfooded software?

Ask HN: What inspires you to persevere through adversity?

Ask HN: Brick and Mortar Dev Agency

Ask HN: What are some cool or underrated tech companies based in Canada?

Ask HN: How to generate product docs E2E?

Ask HN: Do you use LLM for HTML translations?

Are there any noteworthy LinkedIn alternatives?

Proposal: GUI-first, text-based mechanical CAD inspired by software engineering

Super Simple "Hallucination Traps" to detect interview cheaters

Ask HN: Took a break after burnout – what now?

Ask HN: Is there a business for extracting US tech talent?

Ask HN: How many communities HN it devs in C language?

Why did not numpy copy the J rank concept?

Looking for Early Testers for a AI Assistant Inside Zotero

Ask HN: What happened to W3C's PROV initiative to add provenance to the Web?

Which email clients work well with keyboard shortcuts?

Ask HN: How is the tech scene in LA?

Ask HN: How do you deal with data backups in servers?

Ask HN: What old or outdated software have you never found a replacement for?

Ask HN: MiniNAS Experience

Ask HN: What are the best resources to help with health insurance denials?

Ask HN: How do you sell to B2B in current state of AI?

Tell HN: A fake, highly obfuscated Solidity VSCode plugin found on marketplace

If Emacs is not a text editor, then what is it really?

Ask HN: Are there any good WASM-based sites for learning Bash, Linux and CLI?

Windows SPNEGO Nightmare: Critical RCE Vulnerability

Comments (1)