4603 matches found
NTLM Privilege Escalation
The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to elevate their privileges remotely...
Emby Version Scanner
This module attempts to identify the version of an Emby Media Server running on a host. If you wish to see all the information available, set VERBOSE to true. Use in conjunction with embyssrfscanner to locate devices vulnerable to CVE-2020-26948. Module Options msf use...
CVE-2021-0055
Insecure inherited permissions for some IntelR NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0055
Insecure inherited permissions for some IntelR NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0055
Insecure inherited permissions for some IntelR NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0055
CVE-2021-0055 affects Intel NUC 9 Extreme Laptop Kit LAN Driver (LAPQC71A–D). The root cause is insecure inherited permissions, which could let an authenticated local user escalate privileges. References to Intel’s advisory INTEL-SA-00505 confirm the vulnerable state for driver versions before 10...
CVE-2021-0055: Incorrect Permission Assignment for Critical Resource
Insecure inherited permissions for some IntelR NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2021-12876
Name of the Vulnerable Software and Affected Versions: IntelR NUC 9 Extreme Laptop Kit LAN Drivers versions prior to 10.42 Description: The issue concerns insecure inherited permissions that may allow an authenticated user to potentially enable escalation of privilege via local access...
Security Bulletin: IBM DataPower Gateway enables default IPMI account
Summary If IPMI over LAN Is enabled, a default administrator account is also enabled. Vulnerability Details CVEID: CVE-2019-4621 DESCRIPTION: IBM DataPower Appliance and IBM MQ Appliance have a default administrator account that is enabled if the IPMI LAN channel is enabled. A remote attacker cou...
Windows NTLM 权限许可和访问控制问题漏洞
Libntlm is an NTLM NT LAN Manager authentication library. A security vulnerability exists in Windows NTLM. The following products and editions are affected: Windows 10 Version 1909 for ARM64-based Systems,Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-based...
Intel® NUC 9 Extreme Laptop Kit LAN Driver Advisory
Summary: A potential security vulnerability in some Intel® NUC 9 Extreme Laptop Kit LAN Drivers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0055 Description: Insecure inherited permissions...
NetBSD EAPOL DoS
The vulnerability of the Extensible Authentication Protocol over LAN EAPOL implementation in the NetBSD operating system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to cause service failures...
RFNTPS vulnerable to OS command injection
Overview RFNTPS provided by NIPPON ANTENNA Co.,Ltd. is a terrestrial reception type NTP server. RFNTPS contains an OS command injection vulnerability CWE-78. Tomoomi Iwata of NEC Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...
JVN#13076220: RFNTPS vulnerable to OS command injection
RFNTPS provided by NIPPON ANTENNA Co.,Ltd. is a terrestrial reception type NTP server. RFNTPS contains an OS command injection vulnerability CWE-78. Impact A user on the same LAN who can access the product may execute an arbitrary OS command with root privilege. Solution Update the Firmware Updat...
Security update for syncthing (moderate)
openSUSE Security Update: Security update for syncthing Announcement ID: openSUSE-SU-2021:0713-1 Rating: moderate References: 1184428 Cross-References: CVE-2021-21404 CVSS scores: CVE-2021-21404 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP...
Shenzhen Skyworth RN510 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities
Overview ======== Title:- Authenticated XSRF in RN510 Mesh Extender. CVE-ID :- CVE-2021-25327 Author: Kaustubh G. Padwad Vendor: Shenzhen Skyworth Digital Technology Company Ltd.http://www.skyworthdigital.com/products Products: 1. RN510 with firmware V.3.1.0.4 Tested and verified Potential 2.RN62...
CVE-2021-25811
MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listenhttplan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to access the webserver unless the listenhttplan parameter to uhttpd.json is manual...
CVE-2021-25811
MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listenhttplan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to access the webserver unless the listenhttplan parameter to uhttpd.json is manual...
PT-2021-16801
Name of the Vulnerable Software and Affected Versions MERCUSYS Mercury X18G version 1.0.5 Description The issue allows for denial of service via a crafted value to the listen http lan parameter. After the device restarts following exploitation, it cannot access the web server unless the listen ht...