pfSense <= 2.2.5 Wizard XML Directory Traversal Vulnerability - Active Check

pfSense is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:pfsense:pfsense";...

SUSE SLES11 Security Update : samba (SUSE-SU-2016:0032-1)

This update for Samba fixes the following security issues : - CVE-2015-5330: Remote read memory exploit in LDB bnc958586. - CVE-2015-5252: Insufficient symlink verification file access outside the share bnc958582. - CVE-2015-5296: No man in the middle protection when forcing smb encryption on the...

KLA10752 Denial of service vulnerability in Microsoft Acrtive Directory Federation Services

Lack of input data checks was found in Microsoft Active Directory Federation Services. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed input to form-based authentication. Original advisories...

samba: DoS to AD-DC due to insufficient checking of asn1 memory allocation

A denial of service flaw was found in the LDAP server provided by the AD DC in the Samba process daemon. A remote attacker could exploit this flaw by sending a specially crafted packet, which could cause the server to consume an excessive amount of memory and crash...

libldb: Remote DoS in Samba (AD) LDAP server

A denial of service flaw was found in the ldbwildcardcompare function of libldb. A remote attacker could send a specially crafted packet that, when processed by an application using libldb for example the AD LDAP server in Samba, would cause that application to consume an excessive amount of memo...

Multiple Devices '/scgi-bin/platform.cgi' Unauthenticated File Disclosure Vulnerability (Jan 2016) - Active Check

The remote device is prone to an arbitrary file disclosure vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Lepide Software Active Directory Self Service Password Reset Vulnerability

Lepide Software Active Directory Self Service is a web-based self-service solution for Active Directory Active Directory Services. Lepide Software Active Directory Self Service does not properly restrict the use of the password reset feature, allowing remote attackers to exploit vulnerabilities t...

Tails Information Disclosure Vulnerability

Tails is an open source Tor-based Linux operating system dedicated to privacy protection, which supports installation on CD-ROMs, USB flash drives, and SD card storage media for direct booting, and is characterized by not storing any data on the local system and providing complete Internet...

DEBIAN-CVE-2015-5330

ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive information from daemon heap memory by sending crafted packets and then reading 1 an error message ...

Generate CSV Organizational Chart Data Using Manager Information

This module will generate a CSV file containing all users and their managers, which can be imported into Visio which will render it. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Generate CSV...

Windows Gather Active Directory Managed Groups

This module will enumerate AD groups on the specified domain which are specifically managed. It cannot at the moment identify whether the 'Manager can update membership list' option option set; if so, it would allow that member to update the contents of that group. This could either be used as a...

Security fix for the ALT Linux 7 package samba version 4.3.3-alt1

Dec. 16, 2015 Andrey Cherepanov 4.3.3-alt1 - New version https://www.samba.org/samba/history/samba-4.3.3.html - Security fixes: - CVE-2015-3223 Denial of service in Samba Active Directory server - CVE-2015-5252 Insufficient symlink verification in smbd - CVE-2015-5299 Missing access control check...

Security fix for the ALT Linux 10 package samba version 4.3.3-alt1

Dec. 16, 2015 Andrey Cherepanov 4.3.3-alt1 - New version https://www.samba.org/samba/history/samba-4.3.3.html - Security fixes: - CVE-2015-3223 Denial of service in Samba Active Directory server - CVE-2015-5252 Insufficient symlink verification in smbd - CVE-2015-5299 Missing access control check...

CVE-2015-8570

The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request...

Cross site request forgery (csrf)

The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request...

CVE-2015-8570

The password reset functionality in Lepide Active Directory Self Service allows remote authenticated users to change arbitrary domain user passwords via a crafted request...

CVE-2015-8570

CVE-2015-8570 involves Lepide Active Directory Self Service. The vulnerability allows remote authenticated domain users to change arbitrary domain passwords via crafted requests during the password reset process, due to a flaw in how the reset functionality is processed. Multiple sources (NVD ent...

Lepide Active Directory Self Service Elevation of Privilege Vulnerability

Lepide Active Directory Self Service is a password self-service solution. A security vulnerability exists in the processing of the password reset feature of Lepide Active Directory Self Service. The vulnerability can be exploited by a domain user to change the password of any user within an Activ...

F5 BIG-IP - Linux kernel vulnerability CVE-2015-7613

The remote host is missing a security patch. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

sysPass 1.1.2.23 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-047 Product: sysPass Vendor: http://cygnux.org/ Affected Versions: 1.1.2.23 and below Tested Versions: 1.1.2.23 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Fixed Vendor Notification:...