CVE-2024-29851

Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account...

CVE-2024-29850

Veeam Backup Enterprise Manager allows account takeover via NTLM relay...

CVE-2024-29851

Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account...

CVE-2024-29851

CVE-2024-29851 affects Veeam Backup Enterprise Manager. A high-privilege user could steal the NTLM hash of the Enterprise Manager service account (if not Local System). The issue is mitigated by upgrading to Veeam Backup Enterprise Manager 12.1.2.172, after which the vulnerabilities were fixed; d...

CVE-2024-29850

Veeam Backup Enterprise Manager allows account takeover via NTLM relay...

CVE-2024-29850

Veeam Backup Enterprise Manager allows account takeover via NTLM relay...

CVE-2024-29851

Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account...

Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass

Users of Veeam Backup Enterprise Manager are being urged to update to the latest version following the discovery of a critical security flaw that could permit an adversary to bypass authentication protections. Tracked as CVE-2024-29849 CVSS score: 9.8, the vulnerability could allow an...

Windows 11 to Deprecate NTLM, Add AI-Powered App Controls and Security Defenses

Microsoft on Monday confirmed its plans to deprecate NT LAN Manager NTLM in Windows 11 in the second half of the year, as it announced a slew of new security measures to harden the widely-used desktop operating system. "Deprecating NTLM has been a huge ask from our security community as it will...

Metasploit Wrap-Up 05/17/2024

LDAP Authentication Improvements This week, in Metasploit v6.4.9, the team has added multiple improvements for LDAP related attacks. Two improvements relating to authentication is the new support for Signing and Channel Binding. Microsoft has been making changes to harden the communications to...

CVE-2024-33865

An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/GUID endpoints...

CVE-2024-33865

An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/GUID endpoints...

CVE-2024-33865

An issue was discovered in linqi before 1.4.0.1 on Windows. There is an NTLM hash leak via the /api/Cdn/GetFile and /api/DocumentTemplate/GUID endpoints...

CVE-2024-33865

CVE-2024-33865 affects linqi prior to 1.4.0.1 on Windows, where an NTLM hash leak can occur via the endpoints /api/Cdn/GetFile and /api/DocumentTemplate/{GUID]. Multiple connected sources corroborate the issue and specify that upgrading to version 1.4.0.1 or later resolves the vulnerability. A pr...

May 14, 2024—KB5037781 (OS Build 25398.887)

None None...

May 14, 2024—KB5037788 (OS Build 10240.20651) - EXPIRED

None None...

May 14, 2024—KB5037768 (OS Builds 19044.4412 and 19045.4412) - EXPIRED

None None...

May 14, 2024— Hotpatch KB5037848 (OS Build 20348.2458)

None None...

May 14, 2024—KB5037765 (OS Build 17763.5820) - EXPIRED

None None...

Citrix Provisioning Server - Console User Domain Authentication Failure

While trying to connect to the server console from outside of the PVS server domain you may see an error: "Unable to connect to the Domain Controller if any or the default rootDSE. Error code: 21071225, message: Access is denied. Exception from HRESULT: 0x80070005 EACCESSDENIED, provider:." The P...