3180 matches found
WordPress Plugin Ads Pro 3.4 - Cross-Site Scripting SQL Injection
WordPress Plugin Ads Pro 3.4 - Cross-Site Scripting SQL Injection Exploit Title: Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager = 5.0.12 AND time-based blind Payload: bsaprostats=1&[email protected]&bsaproid=xx AND S...
A week in security (July 17 – July 23)
Over the last week, we have covered Play Protect, android’s new security system and how the Dutch police ran Hansa Market after the take down of Alpha Bay, both major players on the Dark Web. We also provided some tips on how to stay cyber safe this summer. We also saw how the Terror exploit kit...
Unikrn: Flash CSRF: Update Ad Frequency %: [cp-ng.pinion.gg]
Description: ----------- Attacker can update the user's Ad Frequency % using flash + 307 redirect trick by making post request to particular endpoint. Step To Reproduce: ----------- + Get logged at: https://cp-ng.pinion.gg + Visit: http://geekboy.ninja/poc/freq.swf + Ad Frequency should be update...
Lenovo Connect2 Information Disclosure Vulnerability
Lenovo Connect2 is a free management tool for transferring content between computers and cell phones from the Chinese company Lenovo. A security vulnerability exists in Lenovo Connect2 that stems from the program storing ad-hoc connection passwords in a user-readable location. An attacker could u...
Code injection
In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is made between two systems for the purpose of sharing files, the password for this ad-hoc connection will be stored in a user-readable location. An attacker with read access to t...
CVE-2017-3742
In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is made between two systems for the purpose of sharing files, the password for this ad-hoc connection will be stored in a user-readable location. An attacker with read access to t...
CVE-2017-3742
In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is made between two systems for the purpose of sharing files, the password for this ad-hoc connection will be stored in a user-readable location. An attacker with read access to t...
CVE-2017-3742
CVE-2017-3742 details from Lenovo advisory: Lenovo Connect2 stores the ad-hoc connection password in a user-readable location on Windows builds before 4.2.5.4885 and Android builds before 4.2.5.3071. This allows an attacker with access to the user’s files to view the contents being transferred vi...
CVE-2017-3742
In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is made between two systems for the purpose of sharing files, the password for this ad-hoc connection will be stored in a user-readable location. An attacker with read access to t...
Microsoft Office 365 Enterprise E3 Insufficient Session Expiration Vulnerability
Microsoft Office 365 Enterprise E3 suffers from an insufficient session expiration vulnerability. Product: Office 365 Sharepoint Manufacturer: Microsoft Affected Versions: ? Tested Versions: Office 365 Enterprise E3 version from February 2017 Vulnerability Type: Insufficient Session Expiration...
CopyCat Android Rooting Malware Infected 14 Million Devices
A newly uncovered malware strain has already infected more than 14 Million Android devices around the world, earning its operators approximately $1.5 Million in fake ad revenues in just two months. Dubbed CopyCat, the malware has capabilities to root infected devices, establish persistency, and...
Microsoft Azure AD Connect Privilege Elevation Vulnerability (4033453)
This host is missing an important security update according to Microsoft Security Advisory 4033453 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2017-8613
Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."...
Privilege escalation
Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."...
CVE-2017-8613
Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka "Azure AD Connect Elevation of Privilege Vulnerability."...
CVE-2017-8613
CVE-2017-8613 concerns Microsoft Azure AD Connect Password writeback. When the password writeback feature is misconfigured during enablement, an attacker could abuse the permission model to reset passwords and gain unauthorized access to arbitrary on‑premises AD privileged user accounts. The vuln...
Microsoft Entra Connect Installed
Binary data microsoftazureadconnectinstalled.nbin...
Microsoft Security Advisory 4033453: Vulnerability in Azure AD Connect Could Allow Elevation of Privilege
The version of Azure Active Directory AD Connect installed on the remote Windows host is prior to 1.1.553.0, and the password writeback setting is enabled. It is, therefore, affected by an elevation of privilege vulnerability due to improper permissions being granted when enabling the password...
Microsoft Issues 'Important' Security Fix for Azure AD Connect
Microsoft is warning customers of a bug in its Azure Active Directory Connect product that could allow an adversary to escalate privileges and reset passwords and gain unauthorized access to user accounts. The advisory 4033453 was issued Tuesday via Microsoft’s TechNet website for the vulnerabili...
