CVE-2017-5689

An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology AMT and Intel Standard Manageability ISM. An unprivileged local attacker could provision manageability features gaining unprivileged network or local system...

Intel Patches Nine-Year-Old Critical CPU Vulnerability

Intel patched a critical vulnerability that dates back nine years and impacts business desktop PCs that utilize the company’s Active Management Technology. According to an Intel security bulletin, the flaw could allow an adversary to elevate privileges on a vulnerable system. Intel said there are...

Intel Active Management Technology (AMT) does not properly enforce access control

Overview Technologies based on Intel Active Management Technology may be vulnerable to remote privilege escalation, which may allow a remote, unauthenticated attacker to execute arbitrary code on the system. Description CWE-284: Improper Access Control - CVE-2017-5689Intel offers a number of...

Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Escalation of Privilege

Description: There are two ways this vulnerability may be accessed please note that Intel® Small Business Technology is not vulnerable to the first issue. An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel® Active Management Technology AMT...

PT-2017-2602 · Intel · Intel Standard Manageability +3

Name of the Vulnerable Software and Affected Versions: Intel Active Management Technology AMT versions affected versions not specified Intel Standard Manageability ISM versions affected versions not specified Intel Small Business Technology SBT versions affected versions not specified Description...

Intel Firmware Vulnerability

Intel has released recommendations to address a vulnerability in the firmware of the following Intel products: Active Management Technology, Standard Manageability, and Small Business Technology, firmware versions 6.x, 7.x, 8.x 9.x, 10.x, 11.0, 11.5, and 11.6. This vulnerability does not affect...

Oracle E-Business Suite 'IESFOOTPRINT' SQLi Vulnerability - Active Check

Oracle E-Business Suite is prone to an SQL injection SQLi vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

SilverStripe CMS < 3.1.10 Information Disclosure Vulnerability - Active Check

SilverStripe CMS is prone to a path disclosure vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Weblate: Existing sessions valid after removing third party auth

Hi team, I noticed an authentication break when logging in with 3rd party credentials in https://hosted.weblate.org/ POC 1 access https://hosted.weblate.org/accounts/profile/auth link to a Google account for example 2 on other device access the same account using Google credentials 3 return to th...

PT-2017-15942

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1, 12.2.1.2 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks can result in...

Ad-LDAP-Enum - Active Directory LDAP Enumerator

ad-ldap-enum is a Python script that was developed to discover users and their group memberships from Active Directory. In large Active Directory environments, tools such as NBTEnum were not performing fast enough. By executing LDAP queries against a domain controller, ad-ldap-enum is able to...

The vulnerability of the Mac OS X operating system, which allows a hacker to circumvent existing access restrictions

The vulnerability of the MCX Client component of the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions using residual data from Active Directory certificates...

Cross-Site Scripting (XSS)

OWASP AntiSamy is vulnerable to cross-site scripting XSS attacks. A malicious user can pass a string to the application through a tag that supports style with active content to execute arbitrary code...

Enable XenMobile Enrollment of iOS and Android Devices with Azure AD as Identity Provider

With the latest version XenMobile server, you are provided with a new feature where an end user can use their Azure Active Directory credentials to enroll their Windows, iOS and Android devices to the XenMobile server. In this case Azure Active Directory will be the Identity provider and XenMobil...

Generic HTTP Directory Traversal / File Inclusion (Web Root) - Active Check

Generic check for HTTP directory traversal / file inclusion vulnerabilities on the web root level of the remote web server. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

WinSCP 5.9.4 LIST Denial Of Service

Exploit Title: WinSCP 5.9.4 - LIST Command Denial of service Crush application Date: 4-4-2017 mm.dd.yy Exploit Author: M.Ibrahim [email protected] E-Mail: vulnbug gmail.com Vendor Home Page: https://winscp.net/eng/index.php Vendor download link: https://winscp.net/download/WinSCP-5.9.4-Setup.exe...

shARP - anti-ARP-spoofing application software and uses active scanning method to detect any ARP-spoofing incidents

ARP spoofing allows an attacker to intercept data frames on a network, modify the traffic, or stop all traffic. Often the attack is used as an opening for other attacks, such as denial of service, man in the middle, or session hijacking attacks.Our anti- ARP spoofing program, shARP detects the...

Microsoft Windows ADFS Security Restriction Bypass Vulnerability

Microsoft Windows is the popular computer operating system. A security restriction bypass vulnerability exists in Microsoft Windows ADFS, which can be exploited by an attacker to brute-force break an account password, thereby bypassing the account lockout protection mechanism requested by an...

Microsoft Windows Active Directory Denial of Service Vulnerability (CNVD-2017-05763)

Microsoft Windows is the popular computer operating system. A denial of service vulnerability exists in Active Directory's handling of malicious search queries, which can be exploited by an attacker to cause Active Directory services to become unresponsive, resulting in a denial of service...

CVE-2017-0159

A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability."...