10196 matches found
Active Directory Federation Service Security Feature Bypass Vulnerability
...
PT-2023-3496 Ā· Microsoft Ā· Active Template LibraryĀ +1
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Active Template Library ATL and is associated with insufficient access restrictions in Windows operating systems. It allows an attacker to potentially elevate...
This Week in Spring - July 11th, 2023
Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm in yummy, sunny Jakarta, Indonesia at the moment, preparing for a week of meetings and the SpringOne Tour Indonesia event later this week. I'll also be speaking in Kuala Lumpur, Malaysia on July 20th, 2023 . If you're in...
Microsoft Windows Active Directory ē«äŗę”件é®é¢ę¼ę“
Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...
PT-2023-4388 Ā· Microsoft Ā· Active Directory Federation ServicesĀ +1
Name of the Vulnerable Software and Affected Versions: Active Directory Federation Service versions affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing security restrictions. This can affect the system,...
Microsoft Windows Active Template Library å®å Øę¼ę“
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows Active Template Library. An attacker could exploit this vulnerability to gain elevated privileges. The...
PT-2023-3910 Ā· Microsoft Ā· Windows Active Directory Certificate ServicesĀ +1
Name of the Vulnerable Software and Affected Versions: Windows Active Directory Certificate Services AD CS affected versions not specified Description: The issue is related to insufficient input validation in Windows Active Directory Certificate Services AD CS, which can be exploited by a remote...
PT-2023-3909 Ā· Microsoft Ā· Windows Active Directory Certificate ServicesĀ +1
Name of the Vulnerable Software and Affected Versions: Windows Active Directory Certificate Services AD CS affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Windows Active Directory Certificate Services AD CS, which can be...
Microsoft Windows Active Directory å®å Øę¼ę“
Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...
Microsoft Azure Active Directory Connect å®å Øę¼ę“
Microsoft Azure Active Directory Connect ADC is a service from the U.S.-based Microsoft that provides identity and access management in the cloud. A security vulnerability exists in Microsoft Azure Active Directory Connect. An attacker exploiting the vulnerability could bypass certain features. T...
Microsoft Azure Active Directory Connect å®å Øę¼ę“
Microsoft Azure Active Directory Connect ADC is a service from the U.S.-based Microsoft that provides identity and access management in the cloud. A security vulnerability exists in Microsoft Azure Active Directory Connect. An attacker exploiting the vulnerability could bypass certain features...
The vulnerability of the Active Directory Integration/LDAP Integration plugin for WordPress management systems arises from the failure to properly neutralize special elements in LDAP requests. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Active Directory Integration/LDAP Integration plugin for WordPress content management systems is related to the lack of measures taken to neutralize special elements in LDAP requests when processing the username parameter. Exploiting this vulnerability can allow an attack...
JumpCloud Resets API Keys Amid Ongoing Cybersecurity Incident
JumpCloud, a provider of cloud-based identity and access management solutions, has swiftly reacted to an ongoing cybersecurity incident that impacted some of its clients. As part of its damage control efforts, JumpCloud has reset the application programming interface API keys of all customers...
CVE-2023-31248 Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability
Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; nftchainlookupbyid failed to check whether a chain was active and CAPNETADMIN is in any user or network namespace...
ZOHO ManageEngine ADManager Plus 代ē é®é¢ę¼ę“
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...
Active Health Check strategies with Spring Cloud Gateway
Active health check strategies with Spring Cloud Gateway Nowadays, applications are built as a collection of small independent upstream services. This accelerates development and allows modules to be focused on specific responsibilities, increasing their quality. This is one of the main advantage...
CVE-2023-3506
A vulnerability was found in Active It Zone Active eCommerce CMS 6.5.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ecommerce/supportticket of the component Create Ticket Page. The manipulation of the argument details with the input alert1 leads to...
CVE-2023-3506
A vulnerability was found in Active It Zone Active eCommerce CMS 6.5.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ecommerce/supportticket of the component Create Ticket Page. The manipulation of the argument details with the input alert1 leads to...
Cross site scripting
A vulnerability was found in Active It Zone Active eCommerce CMS 6.5.0. It has been declared as problematic. This vulnerability affects unknown code of the file /ecommerce/supportticket of the component Create Ticket Page. The manipulation of the argument details with the input alert1 leads to...
CVE-2023-3506
CVE-2023-3506 affects Active It Zone Active eCommerce CMS 6.5.0, specifically the Create Ticket Page component, file path /ecommerce/support_ticket. The issue arises from manipulating the details argument with a payload like , causing cross-site scripting. The description indicates the attack can...