PT-2022-4696

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.3 Description The issue is related to insufficient input validation in the Security and Provisioning component of Oracle Essbase. This allows a high-privileged attacker with logon access to the infrastructure to...

CVE-2022-21513: Undefined Security Weakness

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems component: Core. The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to...

CVE-2022-21510: Undefined Security Weakness

Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server. For supported versions that are affected see note. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Oracle...

PT-2022-4001 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.36 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox. This can be exploited by a high-privileged attacker with logon access to the...

PT-2022-14971

Name of the Vulnerable Software and Affected Versions Oracle Database - Enterprise Edition Sharding affected versions not specified Description The issue affects the Oracle Database - Enterprise Edition Sharding component, allowing a low-privileged attacker with local logon privilege to compromis...

Koh - The Token Stealer

Koh is a C and Beacon Object File BOF toolset that allows for the capture of user credential material via purposeful token/logon session leakage. Some code was inspired by Elad Shamir's Internal-Monologue project no license, as well as KB180548. For why this is possible and Koh's approeach, see t...

SharpSniper - Find Specific Users In Active Directory Via Their Username And Logon IP Address

Often a Red Team engagement is more than just achieving Domain Admin. Some clients will want to see if specific users in the domain can be compromised, for example the CEO. SharpSniper is a simple tool to find the IP address of these users so that you can target their box. It requires that you ha...

Malicious code in ent-unified-logon-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4da5918f94ee376afb11394b1a6160969844e0ce452a9de686cedeb0512b9c22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2750 Malicious code in ent-unified-logon-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4da5918f94ee376afb11394b1a6160969844e0ce452a9de686cedeb0512b9c22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-30496

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information...

CVE-2022-30496

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information...

Sql injection

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information...

CVE-2022-30496

CVE-2022-30496 describes an SQL injection on the login page of MV Informática IDCE MV (version 1.0). The flaw arises in the user field, enabling an attacker to inject SQL payloads and connect to the underlying database to access enterprise‑level private and sensitive information. The provided con...

CVE-2022-30496

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information...

PT-2022-20143

Name of the Vulnerable Software and Affected Versions IDCE MV's application version 1.0 Description The issue allows an attacker to inject SQL payloads in the user field of the Logon Page, potentially connecting to a database to access the enterprise's private and sensitive information...

CVE-2022-30496: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject SQL payloads in the user field, connecting to a database to access enterprise's private and sensitive information...

Fslogix Roaming Profile Failing To Load On Windows 10 AWS Hosted VDA

Fslogix roaming profile failing to load on windows 10 AWS hosted VDA Issue was reprodubile in RDP session as well The below errors were logged in the event logs: Operation: FSLogixLogonPROFILE, SessionId: 3, ErrorCode: 1168, Detail: Logon failed, Please check logs and tracelogging and verify that...

Logon Duration Is Not Logged In Director For Session Logons Taking More Than 3 Minutes To Complete

Logon Duration not being logged in Database and Director for user logins taking more than 3 mins...

PT-2022-6878 · Oracle +1 · Virtualbox +1

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.38 Description: The issue is related to insufficient input validation in the PGMPhysRead function of the Core component in Oracle VM VirtualBox. This allows a high-privileged attacker with logon to t...

CVE-2022-21487

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...