UBUNTU-CVE-2020-14303

A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash...

CVE-2020-14303

CVE-2020-14303 affects Samba’s AD DC NBT server: an empty UDP packet to port 137 can cause a CPU spin and denial of service in Samba versions before the patched releases. The public documents identify Samba AD DC NBT as the vulnerable component and list fixed versions in downstream advisories: Sa...

CVE-2020-14303

A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash...

CVE-2020-14303

A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash...

CVE-2020-14303: Excessive Iteration

A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash...

PT-2020-5781

Name of the Vulnerable Software and Affected Versions: Samba versions prior to 4.10.17 Samba versions prior to 4.11.11 Samba versions prior to 4.12.4 Description: A flaw was found in the AD DC NBT server. The issue is related to insufficient input validation, allowing a remote attacker to cause a...

LDAP Use-after-free in Samba AD DC Global Catalog with

Description Samba 4.5 and later implements VLV - Virtual List View, and Samba 4.10 and later reimplemented the pagedresults control using similar code. This code is more memory-efficient, storing only a pointer to the object, not the returned object. However this means parts of the original reque...

PT-2020-5803

Name of the Vulnerable Software and Affected Versions: Samba versions prior to 4.10.17 Samba versions prior to 4.11.11 Samba versions prior to 4.12.4 Description: The issue is related to a NULL pointer dereference or possible use-after-free flaw in the Samba AD LDAP server. This flaw allows an...

UBUNTU-CVE-2020-10730

A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the...

TAU Threat Analysis: Bundlore (macOS) mm-install-macos

The mm-install-macos variant of the Bundlore family of macOS adware has been around for many years in many variations and delivery methods. Recently, a variant with a novel installation method was discovered. Although most of the installation details were the same or similar to the samples analyz...

Apple Pushes Back Against Ad Tracking in Safari and iOS 14

At WWDC, the company detailed a litany of privacy-friendly improvements to its software...

SQL injection vulnerability in the ad***_in***.php page of the website building system of Zhangzhou City Kexiang Information Service Co.

Zhangzhou City, Fujian Xiangcheng Kexin Information Service Co., Ltd. is a technology company engaged in Internet and Intranet-based business. There is a SQL injection vulnerability in the adin.php page of the website building system of Zhangzhou City Fujian Xiang Xiangcheng Information Service...

TuziCMS v3.0 Ma*** Ad***.cl***.php suffers from SQL injection vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 Ma Ad.cl.php suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

PT-2020-6555

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description The issue is related to flaws in the way Samba AD DC implements access and conformance checking of stored data, potentially allowing an attacker to cause total domain compromise. It is also...

How To Stop Instagram From Tracking Everything You Do

Though the Facebook-owned app doesn't give users complete control, there are ways to limit the data it collects and the types of ads you see...

This Week in Security News: Microsoft June Patch Tuesday Fixes 129 Flaws in Largest-Ever Update and New Android Spyware ActionSpy Revealed via Phishing Attacks from Earth Empusa

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about Microsoft’s largest-ever Patch Tuesday update including 129 CVEs. Also, read about a new Android Spyware dubbed ActionSpy. Read...

Uc365 navigation open source version of ad***.php file SQL injection vulnerability

Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 navigation open source version of ad.php file SQL injection vulnerability , attackers can use this vulnerability to obtain sensitive...

FTC Slams Children’s App Developer for COPPA Violations

Children’s app developer HyperBeard has agreed to pay $150,000 after being accused by the Federal Trade Commission FTC of illegally collecting children’s data without parental consent. HyperBeard‘s website says it’s the largest mobile game developer and publisher in Mexico, with various games suc...

Google Faces Privacy Lawsuit Over Tracking Users in Incognito Mode

Google faces a $5 billion class-action lawsuit over claims that it has been collecting people’s browsing information without their knowledge even when using the incognito browsing mode that’s meant to keep their online activities private. The lawsuit, filed in the federal court in San Jose,...

ADCollector - A Lightweight Tool To Quickly Extract Valuable Information From The Active Directory Environment For Both Attacking And Defending

ADCollector is a lightweight tool that enumerates the Active Directory environment to identify possible attack vectors. It will give you a basic understanding of the configuration/deployment of the environment as a starting point. Notes: ADCollector is not an alternative to the powerful PowerView...