Microsoft SharePoint Server 2016 build < 16.0.4966.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities, two cross-site-scripting XSS exist when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected...

Microsoft SharePoint Server 2016 build < 16.0.4927.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint...

Microsoft SharePoint Server 2016 build < 16.0.4900.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Microsoft SharePoint. - A spoofing vulnerability exists in Microsoft SharePoint when it...

Microsoft SharePoint Server 2016 build < 16.0.4795.1001 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint software when it fails to properly handle objects in memory. - A...

WEM Agent hung sporadically by logon on "application processing"

WEM Agent 1906 sporadically hung after few logins at "application processing". just logoff and logon helps. Client OS: Citrix Virtual Apps Server with Windows Server 2016 latest Updates Error Message in the Event Log: Error while Configuring Registry Security for DOMAIN\test1 Source: Norskale Age...

Microsoft SharePoint Server 2016 build < 16.0.4783.1000 Information Disclosure

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by an information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks a...

Microsoft SharePoint Server 2016 build < 16.0.4834.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities, two cross-site-scripting XSS exist when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected...

Microsoft SharePoint Server 2016 build < 16.0.4873.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An authentication bypass vulnerability exists in Windows Communication Foundation WCF and Windows Identity Foundation WIF, allowing signing of...

Apache Shiro 1.2.4 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apache Shiro v1.2.4 Cookie RememberME Deserial RCE', 'Description' = %q This vulnerability allows remote attackers to execute arbitrary code on...

Microsoft SharePoint Server 2016 build < 16.0.4849.1000 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to ...

CVE-2016-11054

creationtimestamp| type| source ---|---|--- 2020-04-28 21:05:25+00:00| seen| https://t.me/cibsecurity/11706...

CVE-2016-11055

creationtimestamp| type| source ---|---|--- 2020-04-28 21:05:24+00:00| seen| https://t.me/cibsecurity/11705...

CVE-2016-11056

creationtimestamp| type| source ---|---|--- 2020-04-28 21:05:23+00:00| seen| https://t.me/cibsecurity/11704...

CVE-2016-11057

creationtimestamp| type| source ---|---|--- 2020-04-28 21:05:22+00:00| seen| https://t.me/cibsecurity/11703...

CVE-2016-11058

creationtimestamp| type| source ---|---|--- 2020-04-28 21:05:21+00:00| seen| https://t.me/cibsecurity/11702...

CVE-2016-11059

creationtimestamp| type| source ---|---|--- 2020-04-28 20:35:12+00:00| seen| https://t.me/cibsecurity/11701...

CVE-2016-11060

creationtimestamp| type| source ---|---|--- 2020-04-28 20:35:10+00:00| seen| https://t.me/cibsecurity/11700...

CVE-2016-4437

creationtimestamp| type| source ---|---|--- 2020-04-28 19:46:19+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/shiroremembermev124deserialize.rb 2020-05-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48410 2021-09-21...

CVE-2016-11058

The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs...

CVE-2016-11060

Certain NETGEAR devices are affected by insecure renegotiation. This affects SRX5308 before 2017-02-10, FVS336Gv3 before 2017-02-10, FVS318N before 2017-02-10, and FVS318Gv2 before 2017-02-10...