Unverified50% confidenceSolutionExact time
Administrators can use the PowerShell command `Get-ADComputer -Filter {TrustedForDelegation -eq $true}` to find computer accounts with unconstrained delegation enabled.
1
Sources
50%
Confidence
Long-term
Relevance
10/29/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAn attacker only needs to send a curl request to a webhook endpoint with a signature verification vulnerability, declaring a checkout.session.completed event and an arbitrary user ID, to upgrade themselves to a paid plan without a credit card or a Stripe account.58% similarUnverifiedOn Windows, a permission bypass vulnerability was fixed in the PowerShell tool that allowed cmd /c rd, rmdir, del, and erase to delete drive roots or home directories—directories that Remove-Item would reject.58% similarUnverifiedIn the Langflow vulnerability, attackers log in as an ordinary non-admin user, add an MCP server whose command field contains a malicious payload, the server accepts and stores the command without validation, and code execution is then triggered by fetching the MCP server list; captured payloads include extracting environment variables, reading /etc/passwd and probing with commands such as id and whoami.58% similarUnverifiedSystem prompts are usually extractable, and the real problem is rarely the leak itself, but that the prompt contains API keys, internal URLs, customer lists, or business rules treated as the sole access control mechanism.57% similarUnverifiedOpenShell uses the operating system kernel to confine agents in a sandbox, restricting the files they can access and the processes they can start, and completely blocking their network, with outbound requests checked against policy by a Supervisor outside the sandbox.56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1112111API
curl https://kongchang.com/api/v1/knowledge/claims/1112111MCP
get_claim(id=1112111)