14998 matches found
FBI Hacker Dropped Stolen Airbus Data on 9/11
In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle "USDoD" had infiltrated the FBIs vetted information sharing network InfraGard, and was selling the contact information for all 80,000 members. The FBI responded by reverifying InfraGard members and by seizing t...
Cisco Identity Services Engine Privilege Escalation CVE-2023-20193 (cisco-sa-ise-priv-esc-KJLp2Aw)
According to its self-reported version, Cisco Identity Services Engine is affected by a privilege escalation vulnerability that allows an authenticated, Administrator-level attacker to read, write and delete arbitrary files and elevate their privileges to root due to improper privilege management...
The vulnerability of the software for managing identities and access control in Keycloak arises from the lack of measures taken to protect the structure of web pages. This allows attackers to execute arbitrary code.
The vulnerability of the software for managing identities and access on Keycloak exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Cisco Identity Services Engine Privilege Escalation (cisco-sa-ise-priv-esc-KJLp2Aw)
According to its self-reported version, Cisco Identity Services Engine is affected by a privilege escalation vulnerability that allows an authenticated, Administrator-level attacker to read arbitrary files due to a flaw in the ERS API. This can be exploited by sending a crafted request. Please se...
The vulnerability of HTML objects in the software tool for managing identities and access control allows a hacker to carry out XSS attacks.
The vulnerability of HTML objects in software tools for managing identities and access control is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of the Embedded Service Router service of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to increase their privileges.
The vulnerability of the Embedded Service Router service of the Cisco Identity Services Engine ISE management platform for connection policies is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges by sending specially crafted...
The vulnerability of the management software for identities and access control in Keycloak stems from improperly implemented security checks for standard elements. This allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the Keycloak identity and access management software lies in improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Webinar: Identity Threat Detection & Response (ITDR) – Rips in Your Identity Fabric
In today's digital age, SaaS applications have become the backbone of modern businesses. They streamline operations, enhance productivity, and foster innovation. But with great power comes great responsibility. As organizations integrate more SaaS applications into their workflows, they...
The vulnerability of the Linux system integration tool in Microsoft Identity Linux Broker’s identity management environment allows a attacker to execute arbitrary code using a specially created malicious file.
The vulnerability of the Linux system integration tool in the Microsoft Identity Linux Broker environment is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...
CVE-2023-36736
Microsoft Identity Linux Broker Remote Code Execution Vulnerability...
CVE-2023-36736
Microsoft Identity Linux Broker Remote Code Execution Vulnerability...
Remote code execution
Microsoft Identity Linux Broker Remote Code Execution Vulnerability...
CVE-2023-36736 Microsoft Identity Linux Broker Remote Code Execution Vulnerability
...
CVE-2023-36736 Microsoft Identity Linux Broker Remote Code Execution Vulnerability
...
CVE-2023-36736
Microsoft Identity Linux Broker is affected by a remote code execution vulnerability (CVE-2023-36736). Connected sources indicate the issue stems from insufficient input validation in the Microsoft Identity Linux Broker and affects versions prior to 1.6.1. The vulnerability allows an attacker to ...
Mars: **"CSRF Vulnerability in ███████ Website Allows Attackers to Change User Profile Picture at ███████"**
The identified vulnerability is a CSRF vulnerability that allowed an attacker to change the user's profile picture on the ███████ website. The vulnerability was successfully reproduced by creating an account, navigating to the profile picture upload section, and utilizing the provided exploit cod...
Microsoft Identity Linux Broker Remote Code Execution Vulnerability
...
Cisco Identity Services Engine Authorization Issues Vulnerability (CNVD-2023-79690)
Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. Cisco Identity Services Engine suffers from an...
Microsoft Identity Linux Broker Security Vulnerability
Microsoft Identity Linux Broker is a Linux identity agent from Microsoft Corporation USA. A security vulnerability exists in Microsoft Identity Linux Broker. An attacker could exploit the vulnerability to remotely execute code...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in components of Azure. A malicious party could exploit the vulnerabilities to gain elevated privileges, execute code with privileges of a user or gain access to sensitive data. Azure DevOps: |----------------|------|-------------------------------------| | CVE...