Ad-LDAP-Enum - Active Directory LDAP Enumerator

ad-ldap-enum is a Python script that was developed to discover users and their group memberships from Active Directory. In large Active Directory environments, tools such as NBTEnum were not performing fast enough. By executing LDAP queries against a domain controller, ad-ldap-enum is able to...

The vulnerability of the Mac OS X operating system, which allows a hacker to circumvent existing access restrictions

The vulnerability of the MCX Client component of the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions using residual data from Active Directory certificates...

Enable XenMobile Enrollment of iOS and Android Devices with Azure AD as Identity Provider

With the latest version XenMobile server, you are provided with a new feature where an end user can use their Azure Active Directory credentials to enroll their Windows, iOS and Android devices to the XenMobile server. In this case Azure Active Directory will be the Identity provider and XenMobil...

Microsoft Windows ADFS Security Restriction Bypass Vulnerability

Microsoft Windows is the popular computer operating system. A security restriction bypass vulnerability exists in Microsoft Windows ADFS, which can be exploited by an attacker to brute-force break an account password, thereby bypassing the account lockout protection mechanism requested by an...

Microsoft Windows Active Directory Denial of Service Vulnerability (CNVD-2017-05763)

Microsoft Windows is the popular computer operating system. A denial of service vulnerability exists in Active Directory's handling of malicious search queries, which can be exploited by an attacker to cause Active Directory services to become unresponsive, resulting in a denial of service...

CVE-2017-0164

A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka "Active Directory Denial of Service Vulnerability."...

CVE-2017-0159

A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability."...

CVE-2017-0164

A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka "Active Directory Denial of Service Vulnerability."...

Denial of service

A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka "Active Directory Denial of Service Vulnerability."...

CVE-2017-0164

CVE-2017-0164 describes a denial-of-service vulnerability in Windows 10 (1607) and Windows Server 2016 Active Directory where an authenticated attacker sending malicious search queries can cause Active Directory to become nonresponsive. The issue affects AD services by faulty handling of search q...

CVE-2017-0164

A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends malicious search queries, aka "Active Directory Denial of Service Vulnerability."...

Security update for the LDAP elevation of privilege vulnerability in Windows Vista and Windows Server 2008: April 11, 2017

Security update for the LDAP elevation of privilege vulnerability in Windows Vista and Windows Server 2008: April 11, 2017 Summary To learn more about the vulnerability, go to CVE-2017-0166. More Information Important If you install a language pack after you install this update, you must reinstal...

Active Directory Denial of Service Vulnerability

A denial of service vulnerability exists in Active Directory when an authenticated attacker sends malicious search queries. An attacker who successfully exploited this vulnerability could cause the Active Directory service to become nonresponsive. To exploit this vulnerability, an attacker must...

April 11, 2017—KB4015219 (OS Build 10586.873)

None None...

Microsoft Windows Active Directory CVE-2017-0164 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial of service vulnerability. An attacker can exploit this issue to cause a denial of service condition. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...

MATESO GmbH Password Safe And Repository Enterprise 7.4.4 Build 2247 Credential Management

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-036 Products: Password Safe and Repository Enterprise Manufacturer: MATESO GmbH Affected Versions: 7.4.4 Build 2247 Tested Versions: 7.4.4 Build 2247 Vulnerability Type: Credentials Management CWE-255 Violation of Secure Desig...

KB4015217: Windows 10 1607 April 2017 Cumulative Update

The remote Windows 10 host is missing security update KB4015217. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the open-source libjpeg image processing library due to improper handling of objects in memory. An unauthenticated, remote...

Pentesting Active Directory Environments: CrackMapExec

Pentesting Active Directory Environments: CrackMapExec CrackMapExec a.k.a CME is a post-exploitation tool that helps automate assessing the security of large Active Directory networks. Built with stealth in mind, CME follows the concept of “Living off the Land”: abusing built-in Active Directory...

Quest Privilege Manager pmmasterd Buffer Overflow

This modules exploits a buffer overflow in the Quest Privilege Manager, a software used to integrate Active Directory with Linux and Unix systems. The vulnerability exists in the pmmasterd daemon, and can only triggered when the host has been configured as a policy server Privilege Manager for Un...

The vulnerability of the Windows operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Active Directory Federation application for Windows operating systems is related to the lack of protection for mission-critical data. Exploiting this vulnerability could allow an attacker to obtain confidential information through a specially created application...