3996 matches found
This Week in Security News - August 6, 2021
This week, learn how false advertisers use spam browser notifications to gain ad revenue. Also, read about the results from Trend Micro’s first half 2021 biannual Cyber Risk Index report...
France Cracked Down on Google’s Ad Tech. What’s Next?
The French Competition Agency has hit the company with $855 million in fines this year. The money is meaningless—but the changes could be profound...
AD Starter Scan - Dangerous Trust Relationship
Binary data adsitrustunsafe.nbin...
uListing < 2.0.6 - Authenticated IDOR
An Authenticated User IDOR vulnerability was discovered in the plugin. Important: userid and listingid values are dependent on each other, that is, if the author ID == 4, the data can only be modified for those ADs and pages that relate to this particular ID. You can find out the author of the...
New PetitPotam NTLM Relay Attack Lets Hackers Take Over Windows Domains
A newly uncovered security flaw in the Windows operating system can be exploited to coerce remote Windows servers, including Domain Controllers, to authenticate with a malicious destination, thereby allowing an adversary to stage an NTLM relay attack and completely take over a Windows domain. The...
Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS)
Summary Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Windows servers. PetitPotam is a classic NTLM Relay Attack, and such attacks have been previously documented by Microsoft along with numerous mitigation options to protect...
RHEL 7 : libldb (RHSA-2021:2786)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2786 advisory. The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases. Securit...
D-Link D-LINK DIR-3040 信任管理问题漏洞
D-LINK DIR-3040 is a router from D-Link, Taiwan, China. A trust management issue vulnerability exists in the D-LINK DIR-3040, which stems from the product's Zebra IP Routing Manager feature.The lack of an effective trust management mechanism in the Zebra IP Routing Manager feature of the D-LINK...
CVE-2021-33779
Windows AD FS Security Feature Bypass Vulnerability...
CVE-2021-33781
Azure AD Security Feature Bypass Vulnerability...
Security feature bypass
Windows AD FS Security Feature Bypass Vulnerability...
Security feature bypass
Azure AD Security Feature Bypass Vulnerability...
CVE-2021-33781
Technical details for CVE-2021-33781 are not publicly available in the provided documents. No affected products, versions, exploitation status, or fixes are disclosed here. Monitor for official advisories for updates.
CVE-2021-33781 Azure AD Security Feature Bypass Vulnerability
...
CVE-2021-33779 Windows AD FS Security Feature Bypass Vulnerability
...
CVE-2021-33779: Undefined Security Weakness
Windows AD FS Security Feature Bypass Vulnerability...
CVE-2021-33781: Undefined Security Weakness
Azure AD Security Feature Bypass Vulnerability...
Azure AD Security Feature Bypass Vulnerability
...
