ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78730)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...

PT-2021-4428 · Microsoft · Active Directory +1

Name of the Vulnerable Software and Affected Versions: Active Directory affected versions not specified Description: The issue is related to insecure privilege management in Active Directory, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78731)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

PT-2021-4750 · Microsoft · Active Directory Federation Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Federation Server versions affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Active Directory Federation Services AD FS in Microsoft...

PT-2021-4394 · Microsoft · Windows Ad Fs +1

Name of the Vulnerable Software and Affected Versions: Windows AD FS affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to bypass the security mechanism. This can affect the system. Recommendations: At the moment, there is ...

Solarwinds SolarWinds Pingdom 代码问题漏洞

Solarwinds SolarWinds Pingdom is a complete website monitoring platform from Solarwinds, Inc. It is used to measure the latency of the websites it monitors. A security vulnerability exists in several solarwinds products. The vulnerability stems from the inability to invalidate a user's session...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78728)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...

ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78736)

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus version 7110 and earlier are vulnerable to file uploads, which can be exploited by attackers to cause remot...

Microsoft Active Directory Federation Services 安全特征问题漏洞

Microsoft Active Directory Federation Services is a software component of Microsoft Corporation that runs on the Windows Server operating system. It provides users with single sign-on access to systems and applications that cannot use Integrated Windows Authentication IWA through Active Directory...

Microsoft Windows 安全特征问题特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Role: A security signature issue vulnerability exists in Windows Active Directory Server. The following products and versions are affected:Windows Server,...

Zoho ManageEngine ADManager Plus code issue vulnerability

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and help desk technicians with day-to-day management tasks, such as bulk management of user accounts...

Zoho ManageEngine ADManager Plus XXE Vulnerability

Zoho ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A XXE vulnerability exists in Zoho ManageEngine ADManager Plus versions prior to 7110. No detailed vulnerability details are provided at this time...

Zoho ManageEngine ADManager Plus 代码问题漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and help desk technicians with day-to-day management tasks, such as bulk management of user accounts...

Zoho ManageEngine ADManager Plus 代码问题漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

Zoho ManageEngine ADManager Plus 代码问题漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...

Zoho ManageEngine ADManager Plus 代码问题漏洞

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...

Microsoft’s 5 guiding principles for decentralized identities

Three years ago, as part of Microsoft’s mission to empower people and organizations to achieve more, we announced that we were incubating a new set of decentralized identity technologies based on a simple vision: Each of us needs a digital identity we own, one which securely and privately stores...

Vulnerability fixed in Typo3

The developers of Typo3 have fixed a vulnerability in Typo3 core. An unauthenticated malicious person could potentially exploit the vulnerability potentially exploit it to perform a Cross-site Request Forgery and thereby trick a victim into execute code under the malicious party's control. In the...

CVE-2021-35497

The FTL Server tibftlserver and Docker images containing tibftlserver components of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, TIBCO ActiveSpaces - Enterprise Edition, TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, TIBCO FT...

Apache Warns of Zero-Day Exploit in the Wild — Patch Your Web Servers Now!

Apache has issued patches to address two security vulnerabilities, including a path traversal and file disclosure flaw in its HTTP server that it said is being actively exploited in the wild. "A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could...