Microsoft Windows Local Security Authority Subsystem Service 缓冲区错误漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

Microsoft Windows Local Security Authority Subsystem Service 安全特征问题漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

How to Audit Password Changes in Active Directory

Today's admins certainly have plenty on their plates, and boosting ecosystem security remains a top priority. On-premises, and especially remote, accounts are gateways for accessing critical information. Password management makes this possible. After all, authentication should ensure that a user ...

CVE-2020-20138

creationtimestamp| type| source ---|---|--- 2020-12-18 02:43:15+00:00| seen| https://t.me/cibsecurity/21034 2024-11-14 06:07:32+00:00| seen| MISP/9f400dab-f398-4434-ae90-6d24df30d54f...

Privilege escalation

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Recommended update for mailman (moderate)

openSUSE Security Update: Recommended update for mailman Announcement ID: openSUSE-SU-2020:1752-1 Rating: moderate References: 1171363 1173369 Cross-References: CVE-2020-12108 CVE-2020-12137 CVE-2020-15011 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes three vulnerabilities...

Recommended update for mailman (moderate)

openSUSE Security Update: Recommended update for mailman Announcement ID: openSUSE-SU-2020:1707-1 Rating: moderate References: 1171363 1173369 Cross-References: CVE-2020-12108 CVE-2020-12137 CVE-2020-15011 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is now...

CVE-2020-11651

creationtimestamp| type| source ---|---|--- 2020-05-01 15:21:08+00:00| seen| https://t.me/thehackernews/685 2020-05-03 19:21:42+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/saltstack-salt-hallintakehikossa-kriittisia-haavoittuvuuksia 2020-05-04 12:06:14+00:00| exploited|...

CVE-2013-7471

creationtimestamp| type| source ---|---|--- 2019-06-12 00:30:27+00:00| seen| https://t.me/cibsecurity/4850 2025-03-03 10:15:47+00:00| seen| MISP/28347c8a-8fa9-4d49-bd73-98a955d83c02 2025-03-04 04:19:36+00:00| seen| MISP/28347c8a-8fa9-4d49-bd73-98a955d83c02 2026-07-16 12:15:02+00:00| seen|...

openSUSE Security Update : mailman (openSUSE-2019-495)

This update for mailman to version 2.1.27 fixes the following issues : This security issue was fixed : - CVE-2018-0618: Additional protections against injecting scripts into listinfo and error messages pages bsc1099510. These non-security issues were fixed : - The hash generated when...

openSUSE Security Update : mailman (openSUSE-2018-691)

This update for mailman to version 2.1.27 fixes the following issues : This security issue was fixed : - CVE-2018-0618: Additional protections against injecting scripts into listinfo and error messages pages bsc1099510. These non-security issues were fixed : - The hash generated when...

openSUSE: Security Advisory for mailman (openSUSE-SU-2018:1858-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for mailman (moderate)

This update for mailman to version 2.1.27 fixes the following issues: This security issue was fixed: - CVE-2018-0618: Additional protections against injecting scripts into listinfo and error messages pages bsc1099510. These non-security issues were fixed: - The hash generated when...

Microsoft Windows 10: Manage auditing and security log

This policy setting determines which users can specify object access audit options for individual resources such as files, Active Directory objects, and registry keys. These objects specify their system access control lists SACL. A user who is assigned this user right can also view and clear the...

Vulnerability of Mac OS X and iOS operating systems, allowing attackers to find passwords of arbitrary lengths

The vulnerability of the Security component in Mac OS X and iOS operating systems is related to errors in managing registration data. Exploiting this vulnerability allows a malicious actor to find lengths of arbitrary passwords by using the security log...

Netgear FVS318 Router Multiple Vulnerabilities

Multiple Vulnerabilities in Netgear FVS318 Router ------------------------------------------------------------------------ SUMMARY The Netgear FVS318 is "an easy to use, firewall/router designed for home users and small businesses". SecuriNews Research has found 2 vulnerabilities in the router, o...

Tccms sql注入获得管理账号密码

简要描述： 直接看到/app/model/attackAction.class.php这个文件 public function initLogHacker /get/ foreach$GET as $key=$value if !inarray$key, array'ac','a','c','do'//防止控制器和方法命名不规范被过滤 $this-StopAttack$key,$value,"get",$this-getfilter; $GET$key = StringUtil::safereplace$value; $GET$key =...

NPDS Versions Prior to 08.06 Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/33051/info NPDS is prone to multiple input-validation vulnerabilities: - Multiple local file-include vulnerabilities - An HTML-injection vulnerability - Multiple SQL-injection vulnerabilities - Multiple cross-site scripti...

CVE-2013-4812

creationtimestamp| type| source ---|---|--- 2013-09-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28337 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hppcmsnacupdatecertificates.rb 2025-02-06...