456 matches found
Microsoft Windows Defender / Trojan.Win32/Powessere.G - Detection Mitigation Bypass Vulnerability
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: https://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSDEFENDERTROJAN.WIN32.POWESSERE.GMITIGATIONBYPASSPART2.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows Defender...
Design/Logic Flaw
On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some...
Arista Networks MultiAccess FPGA Security Vulnerability
Arista Networks MultiAccess FPGA is a multi-access network device based on FPGA technology from Arista Networks, USA. This device is typically used in network equipment such as network switches and routers to utilize the flexibility and programmability of FPGAs to achieve high-performance,...
Integer overflow in chunking helper causes dispatching to miss elements or panic
Any SpiceDB cluster with any schema where a resource being checked has more than 65535 relationships for the same resource and subject type is affected by this problem. The issue may also lead to a panic rendering the server unavailable The following API methods are affected: - CheckPermission -...
Microsoft Windows Defender / Detection Bypass Part 3
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: https://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSDEFENDERTROJAN.WIN32.POWESSERE.GMITIGATIONBYPASSPART3.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows Defender...
Windows Defender Detection Mitigation Bypass Vulnerability
This is additional research regarding a mitigation bypass in Windows Defender. Back in 2022, the researcher disclosed how it could be easily bypassed by passing an extra path traversal when referencing mshtml but that issue has since been mitigated. However, the researcher discovered using multip...
CVE-2024-23447
An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allow write and deny read. Although the document is not accessible to the user in Network Drive it is visible in search applications to the user...
Savant 3.0 Denial Of Service
!/usr/bin/perl use IO::Socket; Exploit Title: Savant 3.0 - Denied of Service DoS Discovery by: Fernando Mengali Discovery Date: 27 january 2024 https://sourceforge.net/projects/savant/files/Savant/3.0/Savant30.exe/download Download to demo:...
httpdx 1.5.4 Denial Of Service
!/usr/bin/perl use IO::Socket::INET; Exploit Title: httpdx 1.5.4 - Denied of Service DoS Discovery by: Fernando Mengali Discovery Date: 06 january 2024 Vendor Homepage: http://httpdx.sourceforge.net Download to demo: https://sourceforge.net/projects/httpdx/files/httpdx/httpdx%201.5.4/ Download 2 ...
CVE-2023-41835
A flaw was found in struts. When a Multipart request is performed but some of the fields exceed the maxStringLength limit, the upload files will remain in 'struts.multipart.saveDir', even if the request has been denied...
kernel: soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow
A reference count underflow flaw was found in the Linux kernel's SoundWire bus driver. When pmruntimeresumeandget returns an error -EACCES, the code continues execution and calls pmruntimeput at the end, even though the usage count was never incremented. This causes a usage count underflow in the...
FAS - User is unable to launch desktops with Access Denied windows event
When attempting to launch desktop, Error message shows : "cannot start desktop". Event ID 1 and 28 are logged on Storefront servers. Application and service logs Citrix delivery services = Event ID: 1 Description: The Federated Authentication Server at: returned a server error: 1 for method...
Scripts failing intermittently due to permissions denied (401) exception while using PAT
h3. Issue Summary This is reproducible on the Data Center: Yes h3. Steps to Reproduce Create two Jira users: UserA and UserB and two Projects: ProjectA and ProjectB. Restrict access to ProjectA for UserA, and ProjectB for UserB. Create one issue each on ProjectA and ProjectB. Use the below python...
Citrix FAS 12.1 -Unable to launch apps -access denied error on storefront servers
When launching Apps\Desktops user receives "Cannot Start App" or "Cannot start Desktop", and Errors/Warnings on StoreFront "Access Denied", Event ID 1 Error and Event ID 28 Warning...
Unable to launch the PVS console. Error: "Unable to connect to the Domain Controller.."
After completing the PVS configuration Wizard using a service account within the same domain as the PVS server, the administrators are unable to launch the PVS console and observe the error - "Unable to connect to the Domain Controller if any or the default rootDSE. Error code: 44936673, message:...
StoreFront Propagate Changes not working
Running Propagation results in MMC returning "Snap-in Unavailable: This snap-in performed a non-valid operation and has been unloaded ... Exception Message: Object reference not set to an instance of an object" In event viewer, Citrix Delivery Services Admin records "Error in retrieving...
Access Denied Error After Migrating Configuration from MFA-Enabled Server
Article Applicability The issue documented in this article is relevant only to Veeam Backup & Replication 12.x. A similar issue occurs with Veeam Backup & Replication 13.x, and is documented in KB4898: Sign-In Error After Migrating Configuration From MFA-Enabled Server. Challenge After performing...
Azul Zulu Java Multiple Vulnerabilities (2023-07-18)
The version of Azul Zulu installed on the remote host is prior to 7 7.63.0.14 / 8 8.71.0.14 / 11 11.65.14 / 17 17.43.14 / 20 20.32.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 2023-07-18 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise...
F5 Networks BIG-IP : OpenSSL vulnerability (K000135178)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000135178 advisory. - Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow...
