3917 matches found
Microsoft NTLM information leakage vulnerability
Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. An information disclosure vulnerability exists in Microsoft NTLM, which can be exploited by an attacker to perform spoofing attacks...
Microsoft NTLM security vulnerability
Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM that originates from an attacker exploiting the vulnerability to perform a spoofing...
GSS-NTLMSSP Plugin DoS
The vulnerability of the GSS-NTLMSSP plugin of the GSSAPI library is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...
Newforma Project Center Server security vulnerabilities
Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. An information disclosure vulnerability exists in Newforma Proje...
PT-2025-41477
Name of the Vulnerable Software and Affected Versions Newforma Info Exchange NIX affected versions not specified Description Newforma Info Exchange NIX contains a flaw in the '/NPCSRemoteWeb/LegacyIntegrationServices.asmx' endpoint that allows a remote, unauthenticated attacker to force NIX to...
CVE-2025-35053: Improper Limitation of a Pathname to a Restricted Directory
Newforma Info Exchange NIX accepts requests to '/UserWeb/Common/MarkupServices.ashx' specifying the 'DownloadExportedPDF' command that allow an authenticated user to read and delete arbitrary files with 'NT AUTHORITY\NetworkService' privileges. In Newforma before 2023.1, anonymous access is enabl...
CVE-2025-35050: Deserialization of Untrusted Data
Newforma Info Exchange NIX accepts serialized .NET data via the '/remoteweb/remote.rem' endpoint, allowing a remote, unauthenticated attacker to execute arbitrary code with 'NT AUTHORITY\NetworkService' privileges. The vulnerable endpoint is used by Newforma Project Center Server NPCS, so a...
EUVD-1999-0572
Malware in sbrugna...
EUVD-1999-0504
Malware in sbrugna...
EUVD-2000-0154
Malware in sbrugna...
EUVD-1999-1030
Malware in sbrugna...
EUVD-2001-0506
Malware in sbrugna...
EUVD-1999-0366
Malware in sbrugna...
EUVD-1999-0501
Malware in sbrugna...
EUVD-1999-0495
Malware in sbrugna...
EUVD-1999-1444
Malware in sbrugna...
EUVD-1999-0563
Malware in sbrugna...
EUVD-1999-1339
Malware in sbrugna...