436 matches found
GHSA-5V95-V8C8-3RH6 Privilege escalation in rbac
Impact Using a carefully crafted request or malicious proxy, a user with UserWrite permissions could create another user with higher privileges than their own due to insufficient checks on the allowed set of permissions. The event would be captured in the Event Log. Patches The issue has been fix...
Privilege escalation in rbac
Impact Using a carefully crafted request or malicious proxy, a user with UserWrite permissions could create another user with higher privileges than their own due to insufficient checks on the allowed set of permissions. The event would be captured in the Event Log. Patches The issue has been fix...
CVE-2021-22899
creationtimestamp| type| source ---|---|--- 2021-04-20 15:25:01+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus12/2021 2021-04-21 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=570 2021-07-29 17:59:02+00:00| seen| https://t.me/RussianOSINT/875...
CVE-2021-22538
A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server versions prior to 0.23.1, allows an attacker who 1 has UserWrite permissions and 2 is using a carefully crafted request or malicious proxy, to create another user with higher privileges than their...
Privilege escalation
A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server versions prior to 0.23.1, allows an attacker who 1 has UserWrite permissions and 2 is using a carefully crafted request or malicious proxy, to create another user with higher privileges than their...
CVE-2021-22538
A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server versions prior to 0.23.1, allows an attacker who 1 has UserWrite permissions and 2 is using a carefully crafted request or malicious proxy, to create another user with higher privileges than their...
CVE-2021-22538 Privilege escalation in RBAC system
A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server versions prior to 0.23.1, allows an attacker who 1 has UserWrite permissions and 2 is using a carefully crafted request or malicious proxy, to create another user with higher privileges than their...
CVE-2021-27234
An issue was discovered in Mutare Voice EVM 3.x before 3.3.8. The web application suffers from SQL injection on Adminlog.asp, Archivemsgs.asp, Deletelog.asp, Eventlog.asp, and Evmlog.asp...
Hyland Enterprise Search 11.2.2 Cross Site Scripting
The admin console's event viewer displays logged event data inside of tags. An attack string like "alert'hi'" in any place across Enterprise Search that will cause an error, like instead of a number or for the username on the login page or through the new Federated Authentication, will then be...
Code injection
An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...
CVE-2020-5807
An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpys if a local user opens FactoryTalk Diagnosti...
Quick Guide — How to Troubleshoot Active Directory Account Lockouts
Active Directory account lockouts can be hugely problematic for organizations. There have been documented instances of attackers leveraging the account lockout feature in a type of denial of service attack. By intentionally entering numerous bad passwords, attackers can theoretically lock all of...
CDFMonitor
NOTE : CDFMonitor is now deprecated, to capture trace as service use - https://support.citrix.com/article/CTX677255/citrix-cdfcontrol-as-service Please note: You can download the required file from the Citrix downloads website by visiting the following...
CBS Removed Package Enumeration (Windows Event Log Tool)
Binary data wevtutilremovedpackages.nbin...
The vulnerability of the GlobalProtect for Windows and GlobalProtect for MacOS software lies in the ability to disclose information through event log files, allowing attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the GlobalProtect for Windows and GlobalProtect for MacOS software lies in the exploitation of information disclosure through event log files. Exploiting this vulnerability allows attackers to compromise the confidentiality and integrity of the protected information...
Citrix Client SSL Error Codes
This article provides information on Citrix Client SSL Error Codes. To assist with troubleshooting, Citrix Technical Support has compiled a list of generic SSL error codes that the Citrix client might present the user or write in the Event log when an error occurs. Important! This article is...
LBFO Dynamic Teaming mode may drop packets in Windows Server 2012 R2
LBFO Dynamic Teaming mode may drop packets in Windows Server 2012 R2 This article describes an issue that occurs when you use load balancing and failover LBFO Dynamic Teaming in Windows Server 2012 R2. You can fix this issue by using the update in this article. Before you install this update, see...
Black screen at logon to MCS provisioned, ICa, RDP, and via console
User published image from App Layering. Published image worked normally, they were able to logon. The provisioned the machine via MCS. When they logon to the provisioned machine, they get a black screen. They are able to launch task manager and start a new task for Explorer. The desktop appears...
Changing the Service startup timeout (ServicesPipeTimeout) in Windows
If a service doesn't start within a set amount of time, Windows will kill it and put an error in the System event log. You might decide that you need to extend the service startup timeout. Or, if your services are complaining about a startup timeout too quickly, you might decide you need to check...