3181 matches found
SQL injection vulnerability in the ad***.php page of Tuan ah VIP movie system (CNVD-2019-43831)
Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. A SQL injection vulnerability exists in the ad.php page of Tuan Ah VIP Movie System, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in ad***.php Page of Tuan Ah VIP Movie System
Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. The ad.php page of Tuan Ah VIP Movie System is vulnerable to SQL injection, which can be exploited by attackers to obtain sensitive information from the database...
Adaudit - Powershell Script To Do Domain Auditing Automation
PowerShell Script to perform a quick AD audit | | \ | | | || | | | | | | | | | . | | | |||/ ||||||| by phillips321 If you have any decent powershell one liners that could be used in the script please let me know. I'm trying to keep this script as a single file with no requirements on external too...
SQL injection vulnerability in the ad***.php page ti***, em***, un***, co*** parameters of the website building system of Huizhou Zhongxing Internet Technology Co.
Zhongxing Internet technology station building company is a Huizhou professional network marketing system service providers, focusing on website construction and SEO optimization of a reasonable combination. Huizhou City Zhongxing Internet Technology Co., Ltd. station building system ad.php page...
Code injection
A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue...
MS10-068: Vulnerability in Local Security Authority Subsystem Service could allow elevation of privilege
Resolves a vulnerability in Active Directory directory service, Active Directory Application Mode ADAM, and Active Directory Lightweight Directory Service AD LDS that could allow elevation of privilege if an authenticated attacker sent a specially crafted LDAP messages to a listening LSASS...
CVE-2019-14847
CVE-2019-14847 affects Samba; versions 4.0.0 to before 4.9.15 and 4.10.x up to before 4.10.10 are vulnerable. An attacker can crash the AD DC LDAP server via dirsync, causing denial of service. Privilege escalation is not possible. Remediation: upgrade to Samba 4.9.15 or 4.10.10 (or later) as ind...
CVE-2019-14847
A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue...
CVE-2019-14847
A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue...
openSUSE Security Update : samba (openSUSE-2019-2442)
This update for provides the following fixes : Following security issues were fixed : - CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync bsc1154598. - CVE-2019-10218: Client code could have returned filenames containing path separators bsc1144902...
Akamai and Microsoft: Delivering a Better Zero Trust Access Model for the Hybrid Enterprise Together
The best partnerships evolve over time and are forged with a common goal. Microsoft and Akamai have partnered for years with the common goal of delivering integrated solutions that address real customer problems. A great example is optimizing global end-user performance for cloud workloads with...
Microsoft announces new innovations in security, compliance, and identity at Ignite
Today, at the Microsoft Ignite Conference, we’re announcing new innovations designed to help customers across their security, compliance, and identity needs. With so much going on at Ignite this week, I want to highlight the top 10 announcements: 1. Azure Sentinel—We’re introducing new connectors...
Android Keyboard App Could Swindle 40M Users Out of Millions
Researchers are warning users to delete a popular Android keyboard app that, once downloaded, makes unauthorized purchases of premium digital content. Google told Threatpost it has removed the app from its Google Play marketplace – but researchers say it was downloaded on at least 40 million phon...
FreeBSD : samba -- multiple vulnerabilities (50a1bbc9-fb80-11e9-9e70-005056a311d1)
The samba project reports : Malicious servers can cause Samba client code to return filenames containing path separators to calling code. When the password contains multi-byte non-ASCII characters, the check password script does not receive the full password string. Users with the 'get changes'...
SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2019:2866-1)
This update for provides the following fixes : Following security issues were fixed : CVE-2019-14847: User with 'get changes' permission could have crashed AD DC LDAP server via dirsync bsc1154598. CVE-2019-10218: Client code could have returned filenames containing path separators bsc1144902...
SUSE-SU-2019:2868-1 Security update for samba
This update for samba fixes the following issues: Security issues fixed: - CVE-2019-14847: User with 'get changes' permission can crash AD DC LDAP server via dirsync bsc1154598. - CVE-2019-10218: Client code can return filenames containing path separators bsc1144902. - CVE-2019-14833: Fixed Accen...
CVE-2019-14847
A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue...
Code execution vulnerability in ad***_we***.php file ur*** parameter in seacms backend
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adwe.php file ur parameter there is a code execution vulnerability, attackers can use the vulnerability to obtain control of the web server...
SQL injection vulnerability in ad***_ne***.php file mo*** parameters in seacms backend
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file mo parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL injection vulnerability in ad***_ne***.php file re*** method in seacms backend
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file re method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...