40 matches found
CVE-2022-26923_AD-Certificate-Services
CVE-2022-26923 AD Certificate Services Fecha de publicación : 10/05/2022 Complejidad del ataque: Baja Privilegios requeridos: Bajo Puntuación CVSS : 8.1 La vulnerabilidad permitía a un usuario con pocos privilegios escalar privilegios a administrador de dominio en un entorno predeterminado de...
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.6.3. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.5.5. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...
CVE-2022-26923
CVE-2022-26923 – Certifried 漏洞利用（AD CS 滥用） 自动化利用 CVE-2022-26923 Certifried ，通过滥用 Active Directory 证书服务（AD CS）实现权限提升，并自动回退到基于资源的约束委派（RBCD），最终转储域管理员账户的 NTLM 哈希。 ⚠️ 仅供教育用途 / 实验室 / CTF 请勿在未经授权的环境中使用。 🎯 描述 此脚本自动化执行以下攻击链： 方法 1 — 经典（CVE 直接利用） 1. 创建一个受控的机器账户（使用随机名称以避免冲突） 2. 伪造 dNSHostName 属性，使其与域控制器匹配 3...
Astra Linux – Vulnerability in Samba
A flaw was discovered in Samba. An incomplete access check on dnsHostName allows authenticated, but otherwise unprivileged users to delete this attribute from any object in the directory...
Azure Linux 3.0 Security Update: samba (CVE-2023-0225)
The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-0225 advisory. - A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise...
EUVD-2023-12311
Malicious code in bioql PyPI...
EUVD-2022-35809
Malicious code in bioql PyPI...
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
...
RHEL 7 : samba (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - samba: Symlink race error can allow directory creation outside of the exported share CVE-2021-43566 -...
Improper Access Control
samba is vulnerable to Improper Access Control. The vulnerability exists due to an incomplete access check on dnsHostName which allows unprivileged users to delete this attribute from any object in the directory...
Mageia: Security Advisory (MGASA-2023-0127)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Samba 4.17.x < 4.17.7 / 4.18.x < 4.18.1 Incomplete Access Check
The version of Samba running on the remote host is potentially affected by a vulnerability. A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory. Note that Nessus has no...
AZL-43621 CVE-2023-0225 affecting package samba 4.12.5-7
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory...
AZL-45378 CVE-2023-0225 affecting package samba for versions less than 4.18.3-1
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory...
DEBIAN-CVE-2023-0225
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory...
Design/Logic Flaw
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory...
CVE-2023-0225
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory...
