4416 matches found
CVE-2022-34691 Active Directory Domain Services Elevation of Privilege Vulnerability
...
CVE-2022-34691
CVE-2022-34691 is referenced in connected Citrix and Windows update documentation. Citrix CTX479236 summarizes FAS information tying CVE-2022-34691 to Microsoft KB KB5014754 and related CVEs, describing SSO/Kerberos-related behaviors with VDA and smart card authentication failures when FAS is inv...
CVE-2022-34691 Active Directory Domain Services Elevation of Privilege Vulnerability
...
PT-2022-4121 · Microsoft · Windows Active Directory Domain Services +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Active Directory Domain Services affected versions not specified Description: The issue is related to insufficient access restrictions in the Active Directory Domain Services of the Windows operating system. It allows a remo...
Microsoft Windows Active Directory 安全漏洞
Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. stores information about objects on the network and makes it easy for administrators and users to find and use...
KLA12602 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of...
ManageEngine ADAudit Plus Path Traversal / XML Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ManageEngine ADAudit Plus CVE-2022-28219', 'Description' = %q This module exploits CVE-2022-28219, which is a pair of vulnerabilities in...
ManageEngine ADAudit Plus Path Traversal / XML Injection Exploit
This Metasploit module exploits CVE-2022-28219, which is a pair of vulnerabilities in ManageEngine ADAudit Plus versions before build 7060. They include a path traversal in the /cewolf endpoint along with a blind XML external entity injection vulnerability to upload and execute a file. This modul...
SilentHound - Quietly Enumerate An Active Directory Domain Via LDAP Parsing Users, Admins, Groups, Etc.
Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc. Created by Nick Swink from Layer 8 Security. Installation Using pipenv recommended method sudo python3 -m pip install --user pipenv git clone https://github.com/layer8secure/SilentHound.git cd silenthound...
CVE-2022-34379
Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...
Samba 安全漏洞
Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in Samba versions prior to 4.16.4, 4.15.9, and 4.14.14, which stems from a Samba AD user who can cause the server to access uninitialized data via an LDAP add or modify request,...
UBUNTU-CVE-2022-32746
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl...
UBUNTU-CVE-2022-32745
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...
Vulnerabilities fixed in Samba
The developers of Samba have fixed several vulnerabilities in Samba. A malicious party could potentially exploit them to reset passwords outside of established processes, access system data or possibly execute commands within the scope of the Samba server. To be abused, the malicious party must...
The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to bypass security restrictions and increase their privileges.
The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass system security restrictions and enhance their privileges...
How one Microsoft product manager acts as champion for identity security
A technology career embodies the ancient Roman saying that “luck happens when preparation meets opportunity.” Few industries are as dynamic, fast-paced, or intense as technology. With so many challenges to solve, opportunities are everywhere, but as I’ve learned myself through the years, the best...
How one Microsoft product manager acts as champion for identity security
A technology career embodies the ancient Roman saying that “luck happens when preparation meets opportunity.” Few industries are as dynamic, fast-paced, or intense as technology. With so many challenges to solve, opportunities are everywhere, but as I’ve learned myself through the years, the best...
Deploying a SOAR Tool Doesn’t Have to Be Hard: I’ve Done It Twice
As the senior information security engineer at Brooks, an international running shoe and apparel company, I can appreciate the challenge of launching a security orchestration, automation, and response SOAR tool for the first time. I’ve done it at two different companies, so I’ll share some lesson...
SAMR Computer Management
Add, lookup and delete computer / machine accounts via MS-SAMR. By default standard active directory users can add up to 10 new computers to the domain. Administrative privileges however are required to delete the created accounts. Module Options msf use auxiliary/admin/dcerpc/samrcomputer msf...
New Netwrix Auditor Bug Could Let Attackers Compromise Active Directory Domain
Researchers have disclosed details about a security vulnerability in the Netwrix Auditor application that, if successfully exploited, could lead to arbitrary code execution on affected devices. "Since this service is typically executed with extensive privileges in an Active Directory environment,...