UBUNTU-CVE-2020-8151

There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information...

CVE-2020-8151

CVE-2020-8151: In the Ruby gem Active Resource, there is an information-disclosure vulnerability in versions prior to 5.1.1 where an attacker can craft requests to access data in an unexpected way. The connected IBM security bulletin lists this CVE among multiple Rails-related issues but does not...

CVE-2020-8151

There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information...

CVE-2020-8151

There is a possible information disclosure issue in Active Resource v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak information...

Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability

A cross-site-scripting XSS vulnerability exists when Active Directory Federation Services ADFS does not properly sanitize user inputs. An un-authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected ADFS server. The attacker who successfully...

May 12, 2020—KB4556846 (Monthly Rollup)

None None...

KB4551853: Windows 10 Version 1809 and Windows Server 2019 May 2020 Security Update

The remote Windows host is missing security update 4551853. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a...

PT-2020-2343 · Microsoft · Active Directory Federation Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Federation Services ADFS affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This occurs when Active Directory Federation Services ADFS does not properly sanitize use...

KLA11773 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of...

PayloadsAllTheThings - A List Of Useful Payloads And Bypass For Web Application Security And Pentest/CTF

A list of useful payloads and bypasses for Web Application Security. Feel free to improve with your payloads and techniques ! Every section contains the following files, you can use the templatevuln folder to create a new chapter: README.md - vulnerability description and how to exploit it Intrud...

McAfee Active Response Privilege Vulnerability

McAfee Active Response MAR is an endpoint detection and response tool for security threats from the U.S.-based McAfee. The product supports features such as rapid access to threat data, threat alerts and centralized management. A power lifting vulnerability exists in versions prior to McAfee MAR...

McAfee Active Response Privilege Vulnerability (CNVD-2020-35073)

McAfee Active Response MAR is an endpoint detection and response tool for security threats from the U.S.-based McAfee. The product supports features such as rapid access to threat data, threat alerts and centralized management. A power lifting vulnerability exists in versions prior to McAfee MAR...

McAfee Active Response (MAR) for Mac Elevation of Privilege Vulnerability

McAfee Active Response MAR is an endpoint detection and response tool for security threats from the U.S.-based McAfee. The product supports features such as rapid access to threat data, threat alerts and centralized management. A security vulnerability exists in McAfee MAR prior to version 2.4.3...

CVE-2020-7290

Privilege Escalation vulnerability in McAfee Active Response MAR for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to...

CVE-2020-7290

Privilege Escalation vulnerability in McAfee Active Response MAR for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to...

CVE-2020-7289

Privilege Escalation vulnerability in McAfee Active Response MAR for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to...

CVE-2020-7291

Privilege Escalation vulnerability in McAfee Active Response MAR for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to...

CVE-2020-7291

Privilege Escalation vulnerability in McAfee Active Response MAR for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to...

CVE-2020-7289

Privilege Escalation vulnerability in McAfee Active Response MAR for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to...

Privilege escalation

Privilege Escalation vulnerability in McAfee Active Response MAR for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to...