11523 matches found
OPENSUSE-SU-2020:1121-1 Security update for ldb
This update for ldb fixes the following issues: - CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined bsc1173159. This update was imported from the SUSE:SLE-15-SP1:Update update project...
Important: Red Hat Bug Fix Advisory: Satellite 6.7.2 Async Bug Fix Update
Updated Satellite 6.7 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clien...
SUSE SLED15 / SLES15 Security Update : ldb (SUSE-SU-2020:2067-1)
This update for ldb fixes the following issues : CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined bsc1173159. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...
Exploit for Injection in Apache Archiva
CVE-2020-9495 PoC CVE-2020-9495 is medium severity LDAP injec...
SUSE-SU-2020:2067-1 Security update for ldb
This update for ldb fixes the following issues: - CVE-2020-10730: Fixed a null de-reference in AD DC LDAP server when ASQ and VLV combined bsc1173159...
Autoenum - Automatic Service Enumeration Script
Autoenum is a recon tool which performs automatic enumeration of services discovered. I built this to save some time during CTFs and pen testing environments i.e. HTB, VulnHub, OSCP and draws a bit from a number of existing tools including AutoRecon https://github.com/Tib3rius/AutoRecon, Auto-Rec...
Use-after-Free
Samba is vulnerable to use-after-free. It is possible because of a NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and pagedresults...
Liferay Portal <= 7.1.3, 7.2.x <= 7.2.1 Multiple Vulnerabilities
Liferay Portal is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:liferay:liferayportal"; if...
samba: NULL pointer de-reference and use-after-free in Samba AD DC LDAP Server with ASQ, VLV and paged_results
A NULL pointer dereference, or possible use-after-free flaw was found in the Samba AD LDAP server. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to...
LDAP Password Disclosure
This module will gather passwords and password hashes from a target LDAP server via multiple techniques including Windows LAPS. For best results, run with SSL because some attributes are only readable over encrypted connections. Module Options msf use auxiliary/gather/ldap/passwords msf...
openSUSE Security Update : ldb / samba (openSUSE-2020-1023)
"This update for ldb, samba fixes the following issues : Changes in samba : - Update to samba 4.11.11 + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ and VLV combined; bso14364 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
CVE-2020-15841
Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature...
CVE-2020-15841
Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature...
Design/Logic Flaw
Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature...
CVE-2020-15841
Liferay Portal before 7.3.0 and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4 fail to safely test LDAP connections, allowing remote attackers to obtain the LDAP server’s password via the Test LDAP Connection feature. Affected products: Liferay Portal (pre-7...
CVE-2020-15841
Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attackers to obtain the LDAP server's password via the Test LDAP Connection feature...
openSUSE Security Update : openldap2 (openSUSE-2020-976)
This update for openldap2 fixes the following issues : - CVE-2020-8023: Fixed a potential local privilege escalation from ldap to root when OPENLDAPCONFIGBACKEND='ldap' was used bsc1172698. - Changed DBCONFIG to root:ldap permissions bsc1172704. This update was imported from the SUSE:SLE-15:Updat...
PT-2020-14664 · Liferay · Liferay Portal +1
Name of the Vulnerable Software and Affected Versions: Liferay Portal versions prior to 7.3.0 Liferay DXP 7.0 through fix pack 88 Liferay DXP 7.1 through fix pack 16 Liferay DXP 7.2 through fix pack 3 Description: The issue allows remote attackers to obtain the LDAP server's password via the Test...
openSUSE Security Update : hylafax+ (openSUSE-2020-958)
This update for hylafax+ fixes the following issues : Security issue fixed : - CVE-2020-8024 boo1172731 hylafax+ was updated to version 7.0.2 : - change FIXEDWIDTH default to better accommodate auto-rotation 13 Dec 2019 - prevent SSLaccept from blocking 5 Dec 2019 - support libtiff v4.1 5 Dec 201...
