10328 matches found
Burp Suite < 1.7.34 'Collaborator server certificate' MITM Vulnerability - Linux
Burp Suite Community Edition is prone to a man-in-the-middle MITM vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Ridrelay - Quick And Easy Way To Get Domain Usernames While On An Internal Network
Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv. Quick and easy way to get domain usernames while on an internal network. How it works RidRelay combines the SMB Relay attack, common lsarpc based queries and RID cycling to get a list of domain usernames. It...
Man-in-the-Middle (MitM)
active-directory is vulnerable to man-in-the-middle MitM attacks. The vulnerability exists due to the lack of certificate verification when an Active Directory AD is being bound to the realm, allowing MitM attacks to occur...
Command Execution Vulnerability in ZZZCMS Website Builder System
zzcms is asp language to do free open-source station-building system, mainly facing the majority of webmasters to use. ZZZCMS website builder system there is a command execution vulnerability, attackers can use the vulnerability to execute remote commands...
Sending FireEye HX data to Splunk
FireEye HX is an agent-based Endpoint Protection solution. Something like an antivirus, but focused on Advanced Persistent Threats APT. It has an appliance with GUI where you can manage the agents and see information about detected security incidents. As with any agent-based solution, it's...
CVE-2017-2649
It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks...
CVE-2017-2649
It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks...
Code injection
It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks...
CVE-2017-2649
It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Directory server, thereby enabling Man-in-the-Middle attacks...
CVE-2017-2649
The CVE-2017-2649 entry concerns the Jenkins Active Directory Plugin (up to and including v2.2) that did not verify certificates when connecting to the Active Directory server, enabling Man-in-the-Middle attacks. Affected component: Jenkins Active Directory Plugin; root cause: certificate verific...
SQL Injection Vulnerability in ZZCMS Website Builder System
zzcms is asp language to do free open-source station-building system, mainly facing the majority of webmasters to use. ZZCMS website builder system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitive information in the database...
Intel Converged Security Manageability Engine Active Management Technology Buffer Overflow Vulnerability
The Intel Converged Security Manageability Engine is a security management engine for use in CPUs Central Processing Units from Intel Corporation in the U.S. Active Management Technology AMT is one of the active management components. A buffer overflow vulnerability exists in the event handler of...
Intel Converged Security Manageability Engine Active Management Technology Elevation of Privilege Vulnerability
The Intel Converged Security Manageability Engine is a security management engine for use in CPUs Central Processing Units from Intel Corporation in the U.S. Active Management Technology AMT is one of the active management components. An elevation of privilege vulnerability exists in AMT in the...
Intel Converged Security Management Engine Buffer Overflow Vulnerability
The Intel Converged Security Manageability Engine is a security management engine for use in CPUs Central Processing Units from Intel Corporation in the U.S. Active Management Technology AMT is one of the active management components. A buffer overflow vulnerability exists in the HTTP handler for...
Intel Active Management Technology Multiple Vulnerabilities (INTEL-SA-00112)
Intel Active Management Technology is prone to multiple buffer overflow and memory corruption vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Intel Converged Security Management Engine (CSME) Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00112)
Binary data wmiINTEL-SA-00112.nbin...
Microsoft Bounty Program Offers Payouts for Identity Service Bugs
Microsoft has lifted the curtain on a new bug-bounty program, offering payouts as high as $100,000 for holes in identity services and implementations of the OpenID standard. The bounty program touches on Microsoftâs array of digital identity solutions, which tout strong authentication, secure...
Microsoft Offers $100,000 Bounty for Finding Bugs in Its Identity Services
Microsoft today launched a new bug bounty program for bug hunters and researchers finding security vulnerabilities in its "identity services." Hacking into networks and stealing data have become common and easier than ever but not all data holds the same business value or carries the same risk...
Microsoft Offers $100,000 Bounty for Finding Bugs in Its Identity Services
Microsoft today launched a new bug bounty program for bug hunters and researchers finding security vulnerabilities in its "identity services." Hacking into networks and stealing data have become common and easier than ever but not all data holds the same business value or carries the same risk...
Security Bulletin: A Vulnerabilitiy in IBM ACF(Active Content Filter) affects IBM CĂșram(CVE-2015-1917)
Summary IBM CĂșram is shipped with IBM Active Content Filtering which is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser...