CVE-2020-35378

CVE-2020-35378 affects Online Bus Ticket Reservation 1.0. The login page is vulnerable to SQL injection via username/password fields, enabling arbitrary SQL execution and authentication bypass. Root cause appears to be lack of input validation on SQL statements. Affected version: 1.0. No remediat...

CVE-2020-35378

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields...

Sourcecodester Online Bus Ticket Reservation SQL注入漏洞

Sourcecodester Online Bus Ticket Reservation is an online bus ticketing platform from Sourcecodester USA. A SQL injection vulnerability exists in Online Bus Ticket Reservation version 1.0, which stems from a database-based application that lacks validation of externally-entered SQL statements. An...

Online Bus Ticket Reservation 1.0 SQL Injection

Exploit Title: Online Bus Ticket Reservation 1.0 - SQL Injection Date: 2020-12-07 Exploit Author: Sakshi Sharma Vendor Homepage: https://www.sourcecodester.com/php/5012/online-bus-ticket-reservation-using-phpmysql.html Software Link:...

Online Bus Ticket Reservation 1.0 - SQL Injection

Exploit Title: Online Bus Ticket Reservation 1.0 - SQL Injection Date: 2020-12-07 Exploit Author: Sakshi Sharma Vendor Homepage: https://www.sourcecodester.com/php/5012/online-bus-ticket-reservation-using-phpmysql.html Software Link:...

CVE-2020-27663

In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference IDOR vulnerability that allows an attacker to read data from any itemType e.g., Ticket, Users, etc...

November 19, 2020—KB4594441 (OS Build 14393.4048) Out-of-band

None None...

November 19, 2020—KB4594443 (OS Builds 18362.1199 and 18363.1199) Out-of-band

None None...

November 19, 2020—KB4594440 (OS Builds 19041.631 and 19042.631) Out-of-band

None None...

Kerberos authentication and ticket renewal issues on Windows Server 2012 R2 - Out-of-band

Kerberos authentication and ticket renewal issues on Windows Server 2012 R2 - Out-of-band Applies to: Windows Server 2012 R2 Windows Server 2012 R2 Server Core installation NEW 11/17/20 For information about Windows update terminology, see the article about the types of Windows updates and the...

Kerberos authentication and ticket renewal issues on Windows Server 2012 - Out-of-band

Kerberos authentication and ticket renewal issues on Windows Server 2012 - Out-of-band Applies to: Windows Server 2012 Windows Server 2012 Server Core installation NEW 11/17/20 For information about Windows update terminology, see the article about the types of Windows updates and the monthly...

November 17, 2020—KB4594442 (OS Build 17763.1579) Out-of-band

None None...

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

AZL-10661 CVE-2020-17049 affecting package samba 4.12.5-7

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

Security feature bypass

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

Kerberos KDC Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...

PT-2020-4776 · Microsoft +7 · Kerberos +9

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. ...

Abusing RDP’s Remote Credential Guard with Rubeus PTT

TL;DR Microsoft’s Remote Credential Guard RCG for RDP protects creds if an RDP server is compromised. It leaves little scope for password or NTLM credential dumping when a user connects to the server. It does however introduce workstation attack vectors. Abusing a user’s Kerberos token allows...