3312 matches found
CVE-2020-15259
ad-ldap-connector's admin panel before version 5.0.13 does not provide csrf protection, which when exploited may result in remote code execution or confidential data loss. CSRF exploits may occur if the user visits a malicious page containing CSRF payload on the same machine that has access to th...
Cross site request forgery (csrf)
ad-ldap-connector's admin panel before version 5.0.13 does not provide csrf protection, which when exploited may result in remote code execution or confidential data loss. CSRF exploits may occur if the user visits a malicious page containing CSRF payload on the same machine that has access to th...
CVE-2020-15259 CSRF in Auth0 ad-ldap-connector
ad-ldap-connector's admin panel before version 5.0.13 does not provide csrf protection, which when exploited may result in remote code execution or confidential data loss. CSRF exploits may occur if the user visits a malicious page containing CSRF payload on the same machine that has access to th...
CVE-2020-15259
The CVE-2020-15259 issue affects the ad-ldap-connector admin panel prior to version 5.0.13. The root cause is missing CSRF protection, which could allow CSRF payloads loaded from a malicious page on the same machine to interact with the admin console, potentially causing remote code execution or ...
EulerOS 2.0 SP2 : samba (EulerOS-SA-2020-2396)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controlle...
Fedora 32 : 2:samba / krb5 (2020-939681213a)
KRB5 : - Cross-realm s4u fixes for samba 1836630 - Drop unnecessary conflict with openssl-libs = 3.0.0 - Unify kvno option documentation - Use systemctl reload to HUP the KDC during logrotate SAMBA : - Support S4U operations for Samba AD DC 1836630 - Fix lookup of users and groups when realm used...
ad-vear.ru Cross Site Scripting vulnerability OBB-1467596
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
EulerOS 2.0 SP5 : samba (EulerOS-SA-2020-2270)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A...
How to Run Google SERP API Without Constantly Changing Proxy Servers
You've probably run into a major problem when trying to scrape Google search results. Web scraping tools allow you to extract information from a web page. Companies and coders from across the world use them to download Google's SERP data. And they work well – for a little while. After several...
EulerOS Virtualization 3.0.2.2 : samba (EulerOS-SA-2020-2199)
According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the poorly named...
ad-domus.com Cross Site Scripting vulnerability OBB-1399648
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SQL Injection Vulnerability in 115CMS Backend Ad***.php File
115CMS is a content management system developed on ThinkPHP framework. A SQL injection vulnerability exists in the Ad.php file in the 115CMS backend. An attacker can exploit the vulnerability to obtain sensitive database information...
RAINBOWMIX Apps in Google Play Serve Up Millions of Ad Fraud Victims
Researchers with White Ops have uncovered a scam to deliver millions of out-of-context OOC ads through a group of more than 240 Android applications on the official Google Play store, which the team said were collectively delivering more than 15 million impressions per day at their peak. The apps...
SilentFade malware stole Facebook credentials, $4 million in ad fraud
By Deeba Ahmed Facebook claims that a Chinese company is responsible for operating SilentFade malware. This is a post from HackRead.com Read the original post: SilentFade malware stole Facebook credentials, $4 million in ad fraud...
Facebook 'SilentFade' Malware Attack Stole Credentials For Years
Facebook has detailed a wide-scale Chinese malware campaign that targeted its ad platform for years and siphoned $4 million from users’ advertising accounts. The campaign was addressed by the social media’s security teams after it first became active. Dubbed SilentFade short for “Silently running...
WordPress Microsoft Office 365 / Azure AD | LOGIN plugin <= 11.6 - JWT Signature Verification Bypass vulnerability
JWT Signature Verification Bypass vulnerability found by Philip Akesson in WordPress Microsoft Office 365 / Azure AD | LOGIN plugin versions = 11.6. Solution Update the WordPress Microsoft Office 365 / Azure AD | LOGIN plugin to the latest available version at least 11.7...
Facebook Shut Down Malware That Hijacked Accounts to Run Ads
Hackers spent $4 million of victims’ money to buy ads for diet pills, fake designer handbags, and more...
ad-architectureinterieure.com Cross Site Scripting vulnerability OBB-1370986
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Microsoft Kills 18 Azure Accounts Tied to Nation-State Attacks
Microsoft has suspended 18 Azure Active Directory applications that were being leveraged for command-and-control C2 infrastructure by what it says is a Chinese nation-state actor. While Microsoft services like Azure Active Directory AD – its cloud-based identity and access management service – ar...