CVE-2019-1126

A security feature bypass vulnerability exists in Active Directory Federation Services ADFS which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password...

Security feature bypass

A security feature bypass vulnerability exists in Active Directory Federation Services ADFS which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password...

ADFS Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Active Directory Federation Services ADFS which could allow an attacker to bypass the extranet lockout policy. To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password...

extranet.switalia.eu XSS vulnerability

Open Bug Bounty ID: OBB-712245 Description| Value ---|--- Affected Website:| extranet.switalia.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Step 2. Manage authentication and safeguard access: top 10 actions to secure your environment

This series outlines the most fundamental steps you can take with your investment in Microsoft 365 security solutions. We will provide advice on activities such as setting up identity management through active directory, malware protection, and more. In this post, we explain how to enable single...

extranet.berkenthin.de XSS vulnerability

Open Bug Bounty ID: OBB-695217 Description| Value ---|--- Affected Website:| extranet.berkenthin.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

extranet.bydesign.com XSS vulnerability

Open Bug Bounty ID: OBB-671886 Description| Value ---|--- Affected Website:| extranet.bydesign.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

extranet.fadesp.org.br XSS vulnerability

Open Bug Bounty ID: OBB-644645 Description| Value ---|--- Affected Website:| extranet.fadesp.org.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

extranet.mijnhva.nl XSS vulnerability

Open Bug Bounty ID: OBB-636028 Description| Value ---|--- Affected Website:| extranet.mijnhva.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

extranet.saluduc.cl XSS vulnerability

Open Bug Bounty ID: OBB-612120 Description| Value ---|--- Affected Website:| extranet.saluduc.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

extranet.mininter.gob.pe XSS vulnerability

Open Bug Bounty ID: OBB-558166 Description| Value ---|--- Affected Website:| extranet.mininter.gob.pe Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

extranet.kruispuntmi.be XSS vulnerability

Vulnerable URL: https://extranet.kruispuntmi.be/layouts/15/viewlsts.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

extranet.gov.ab.ca XSS vulnerability

Vulnerable URL: https://extranet.gov.ab.ca/env/infocentre/info/listing.asp?txtsearch=toto=asset%22%3E%3Csvg/onload=alertdocument.domain%3E= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

extranet.gov.ab.ca XSS vulnerability

Vulnerable URL: https://extranet.gov.ab.ca/env/infocentre/edu/listingEd.asp?audience=1"...

extranet.carlsonwagonlit.com XSS vulnerability

Vulnerable URL: https://extranet.carlsonwagonlit.com/Information/OnlineForms/ServiceRequest/default.asp?arrowname=1"...

extranet.de.amadeus.com XSS vulnerability

Open Bug Bounty ID: OBB-229480 Description| Value ---|--- Affected Website:| extranet.de.amadeus.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-0159

A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability."...

Security feature bypass

A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests, aka "ADFS Security Feature Bypass Vulnerability."...

CVE-2017-0159

CVE-2017-0159 affects Windows 10 (1607), Windows Server 2012 R2, and Windows Server 2016. Root cause: ADFS may treat Extranet requests as Intranet, bypassing account lockout protections and enabling easier brute-force access. Public exploit details are not provided in the connected documents. Rem...

ADFS Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests. To exploit this vulnerability, an attacker could run a specially crafted application and attempt to brute-force an account password. An attacker who successfully...