286 matches found
October 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2
October 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1, and Windows Server 2012 R2: MS16-101 Security update for Windows authentication methods MS16-118 Cumulative security update for...
Cumulative update for Windows 10 Version 1607 and Windows Server 2016: October 11, 2016
None None...
Cumulative update for Windows 10: August 9, 2016
None None...
MS16-101: Description of the security update for Windows authentication methods: August 9, 2016 (KB3167679)
None None...
Cumulative update for Windows 10 Version 1511: August 9, 2016
None None...
Cumulative update for Windows 10 Version 1607: August 9, 2016
None None...
MS16-101: Security Update for Windows Authentication Methods (3178465)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - A security downgrade vulnerability exists in Kerberos due to improper handling of password change requests. A man-in-the-middle attacker can exploit this to cause the authentication...
MS16-101: Security update for Windows authentication methods: August 9, 2016
Resolves vulnerabilities in Windows that could allow elevation of privilege if an attacker runs a specially crafted application on a domain-joined system.Important This article contains information that shows you how to help lower security settings or how to turn off security features on a...
August 9, 2016 — KB3176495 (OS Build 14393.51)
None None...
NTLM Authentication on NetScaler
With the release of NetScaler 11 build 64.34, the requirements and configuration for NTLM authentication have changed. It is a common use case to authenticate using Kerberos when users are internal on the network but for external users who cannot reach Active Directory, we fallback to NTLM. The...
How to Force Enterprise Manager Login to Use Form-Based Authentication
Article Applicability This article applies to Veeam Backup & Replication 12.x and older, as in those versions, the default was for Veeam Backup Enterprise Manager to utilize a Windows Authentication pop-up key="useWindowsAuth" value="true". Starting in Veeam Backup Enterprise Manager v13, the...
DEBIAN-CVE-2015-3143
cURL and libcurl 7.10.6 through 7.41.0 does not properly re-use NTLM connections, which allows remote attackers to connect as other users via an unauthenticated request, a similar issue to CVE-2014-0015...
Microsoft Windows NTLM Man-in-the-Middle Information Disclosure Vulnerability
Windows Challenge/Response NTLM is used for network authentication protocols, both on systems running the Windows operating system and on standalone systems. A man-in-the-middle information disclosure vulnerability exists in Microsoft Windows NTLM. This vulnerability could be exploited by an...
Web Wiz Forums 9.68 SQLi Vulnerability
No description provided by source. ========================================= Web Wiz Forums 9.68 SQLi Vulnerability ========================================= Name : Web Wiz Forums 9.68 SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.webwiz.co.uk/webwizforums/ Platform: Windows...
Xeneo Web Server 2.2.9 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7398/info Xeneo web server has been reported prone to denial of service vulnerability. It has been reported that a specifically crafted HTTP GET request containing over 4096 bytes of data will trigger this vulnerability...
MSSQL Password Hashdump
This module extracts the usernames and encrypted password hashes from a MSSQL server and stores them for later cracking. This module also saves information about the server version and table names, which can be used to seed the wordlist. This module requires Metasploit:...
MS12-040: Vulnerability in Microsoft Dynamics AX Enterprise Portal Could Allow Elevation of Privilege (MSSQL check)
Binary data ms12-040mssql.nbin...
CVE-2012-0733
IBM Rational AppScan Enterprise 5.x and 8.x before 8.5.0.1, when Integrated Windows authentication is used, allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account...
PT-2012-2825
Name of the Vulnerable Software and Affected Versions IBM Rational AppScan Enterprise versions 5.x and 8.x before 8.5.0.1 Description The issue allows remote authenticated users to obtain administrative privileges by hijacking a session associated with the service account when Integrated Windows...
CVE-2011-2143
IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obtain login access by using an incorrect password in conjunction with an account name from a different domain...