CVE-2025-27478: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...

Linux Distros Unpatched Vulnerability : CVE-2024-31951

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Opaque LSA Extended Link parser in FRRouting FRR through 9.1, there can be a buffer overflow and daemon crash in ospfteparseextlink for OSPF LSA packets...

CVE-2024-43522

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

...

CVE-2024-43522: Heap-based Buffer Overflow

Windows Local Security Authority LSA Elevation of Privilege Vulnerability...

CBL Mariner 2.0 Security Update: frr (CVE-2024-31951)

The version of frr installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-31951 advisory. - In the Opaque LSA Extended Link parser in FRRouting FRR through 9.1, there can be a buffer overflow and daemon...

In the Opaque LSA Extended Link parser in FRRouting (FRR) through 9.1 there can be a buffer overflow and daemon crash in ospf_te_parse_ext_link for OSPF LSA packets during an attempt to read Segment Routing Adjacency SID subTLVs (lengths are not validated).

...

Samba lsa_io_privilege_set Heap Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Samba lsaioprivilegeset Heap Overflow', 'Description' = %q This module triggers a heap overflow in the LSA RPC service of the Samba daemon. ,...

Windows Secrets Dump

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rubysmb/dcerpc/client' class MetasploitModule Rex::Proto::Kerberos::Crypto::Encryption::DESCBCCRC, 3 = Rex::Proto::Kerberos::Crypto::Encryption::DESCBCMD5, 17 =...

CVE-2024-38122

Microsoft Local Security Authority LSA Server Information Disclosure Vulnerability...

CVE-2024-38118

Microsoft Local Security Authority LSA Server Information Disclosure Vulnerability...

CVE-2024-38122

Technical details about CVE-2024-38122 are not provided in the connected documents. The initial entry only labels an LSA server information disclosure without concrete details on affected products, versions, impact, or fixes; monitor for updates.

CVE-2024-38118 Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

...

CVE-2024-38118

Technical details (affected component, root cause, exploit info, patch status) for CVE-2024-38118 are not provided in the connected documents. The initial description notes LSA server information disclosure but lacks concrete specifics; monitor for updates.

CVE-2024-38118 Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

...

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

...

CVE-2024-38122: Use of Uninitialized Resource

Microsoft Local Security Authority LSA Server Information Disclosure Vulnerability...

CVE-2024-38118: Use of Uninitialized Resource

Microsoft Local Security Authority LSA Server Information Disclosure Vulnerability...

Windows 11 to Deprecate NTLM, Add AI-Powered App Controls and Security Defenses

Microsoft on Monday confirmed its plans to deprecate NT LAN Manager NTLM in Windows 11 in the second half of the year, as it announced a slew of new security measures to harden the widely-used desktop operating system. "Deprecating NTLM has been a huge ask from our security community as it will...

Metasploit Weekly Wrap-Up 05/03/24

Dump secrets inline This week, our very own cdelafuente-r7 added a significant improvement to the well-known Windows Secrets Dump module to reduce the footprint when dumping SAM hashes, LSA secrets and cached credentials. The module is now directly reading the Windows Registry remotely without...