Lucene search
+L

3181 matches found

CNVD
CNVD
added 2019/11/11 12:0 a.m.4 views

SQL injection vulnerability in the ad***.php page of Tuan ah VIP movie system (CNVD-2019-43831)

Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. A SQL injection vulnerability exists in the ad.php page of Tuan Ah VIP Movie System, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/11/11 12:0 a.m.4 views

SQL Injection Vulnerability in ad***.php Page of Tuan Ah VIP Movie System

Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. The ad.php page of Tuan Ah VIP Movie System is vulnerable to SQL injection, which can be exploited by attackers to obtain sensitive information from the database...

7.1AI score
SaveExploits0
Kitploit
Kitploit
added 2019/11/10 12:0 p.m.203 views

Adaudit - Powershell Script To Do Domain Auditing Automation

PowerShell Script to perform a quick AD audit | | \ | | | || | | | | | | | | | . | | | |||/ ||||||| by phillips321 If you have any decent powershell one liners that could be used in the script please let me know. I'm trying to keep this script as a single file with no requirements on external too...

7.3AI score
SaveExploits0References1
CNVD
CNVD
added 2019/11/10 12:0 a.m.3 views

SQL injection vulnerability in the ad***.php page ti***, em***, un***, co*** parameters of the website building system of Huizhou Zhongxing Internet Technology Co.

Zhongxing Internet technology station building company is a Huizhou professional network marketing system service providers, focusing on website construction and SEO optimization of a reasonable combination. Huizhou City Zhongxing Internet Technology Co., Ltd. station building system ad.php page...

7.8AI score
SaveExploits0
Prion
Prion
added 2019/11/06 10:15 a.m.24 views

Code injection

A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue...

4CVSS5.3AI score0.02355EPSS
SaveExploits1References8Affected Software3
Microsoft KB
Microsoft KB
added 2019/11/06 2:22 a.m.53 views

MS10-068: Vulnerability in Local Security Authority Subsystem Service could allow elevation of privilege

Resolves a vulnerability in Active Directory directory service, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS that could allow elevation of privilege if an authenticated attacker sent a specially crafted LDAP messages to a listening LSASS...

9CVSS0.1AI score0.14361EPSS
SaveExploits0
CVE
CVE
added 2019/11/06 12:0 a.m.526 views

CVE-2019-14847

CVE-2019-14847 affects Samba; versions 4.0.0 to before 4.9.15 and 4.10.x up to before 4.10.10 are vulnerable. An attacker can crash the AD DC LDAP server via dirsync, causing denial of service. Privilege escalation is not possible. Remediation: upgrade to Samba 4.9.15 or 4.10.10 (or later) as ind...

4.9CVSS5.9AI score0.02355EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
added 2019/11/06 12:0 a.m.35 views

CVE-2019-14847

A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue...

4.9CVSS6AI score0.02355EPSS
SaveExploits1References8
Debian CVE
Debian CVE
added 2019/11/06 12:0 a.m.27 views

CVE-2019-14847

A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue...

4.9CVSS6AI score0.02355EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2019/11/06 12:0 a.m.35 views

openSUSE Security Update : samba (openSUSE-2019-2442)

This update for provides the following fixes : Following security issues were fixed : - CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync bsc1154598. - CVE-2019-10218: Client code could have returned filenames containing path separators bsc1144902...

6.5CVSS6.1AI score0.03515EPSS
SaveExploits1References8
Akamai Blog
Akamai Blog
added 2019/11/05 3:30 p.m.53 views

Akamai and Microsoft: Delivering a Better Zero Trust Access Model for the Hybrid Enterprise Together

The best partnerships evolve over time and are forged with a common goal. Microsoft and Akamai have partnered for years with the common goal of delivering integrated solutions that address real customer problems. A great example is optimizing global end-user performance for cloud workloads with...

SaveExploits0
Microsoft Secure
Microsoft Secure
added 2019/11/04 2:0 p.m.55 views

Microsoft announces new innovations in security, compliance, and identity at Ignite

Today, at the Microsoft Ignite Conference, we’re announcing new innovations designed to help customers across their security, compliance, and identity needs. With so much going on at Ignite this week, I want to highlight the top 10 announcements: 1. Azure Sentinel—We’re introducing new connectors...

0.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2019/11/01 12:30 p.m.131 views

Android Keyboard App Could Swindle 40M Users Out of Millions

Researchers are warning users to delete a popular Android keyboard app that, once downloaded, makes unauthorized purchases of premium digital content. Google told Threatpost it has removed the app from its Google Play marketplace – but researchers say it was downloaded on at least 40 million phon...

4.4CVSS7.8AI score0.01252EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2019/11/01 12:0 a.m.45 views

FreeBSD : samba -- multiple vulnerabilities (50a1bbc9-fb80-11e9-9e70-005056a311d1)

The samba project reports : Malicious servers can cause Samba client code to return filenames containing path separators to calling code. When the password contains multi-byte non-ASCII characters, the check password script does not receive the full password string. Users with the 'get changes'...

6.5CVSS6.1AI score0.03515EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2019/10/31 12:0 a.m.241 views

SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:2866-1)

This update for provides the following fixes : Following security issues were fixed : CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync bsc1154598. CVE-2019-10218: Client code could have returned filenames containing path separators bsc1144902...

6.5CVSS6.2AI score0.03515EPSS
SaveExploits1References12
OSV
OSV
added 2019/10/30 4:58 p.m.9 views

SUSE-SU-2019:2868-1 Security update for samba

This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14847: User with 'get changes' permission can crash AD DC LDAP server via dirsync bsc1154598. - CVE-2019-10218: Client code can return filenames containing path separators bsc1144902. - CVE-2019-14833: Fixed Accen...

6.5CVSS6.3AI score0.03515EPSS
SaveExploits1References11
UbuntuCve
UbuntuCve
added 2019/10/29 12:0 a.m.36 views

CVE-2019-14847

A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue...

4.9CVSS6.3AI score0.02355EPSS
SaveExploits1References4
CNVD
CNVD
added 2019/10/28 12:0 a.m.3 views

Code execution vulnerability in ad***_we***.php file ur*** parameter in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adwe.php file ur parameter there is a code execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2019/10/28 12:0 a.m.4 views

SQL injection vulnerability in ad***_ne***.php file mo*** parameters in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file mo parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

8AI score
SaveExploits0
CNVD
CNVD
added 2019/10/28 12:0 a.m.2 views

SQL injection vulnerability in ad***_ne***.php file re*** method in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file re method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

7.9AI score
SaveExploits0
Rows per page
Query Builder