116 matches found
Invoke-BadSuccessor.ps1
Invoke-BadSuccessor Abuse Delegated Managed Service Accounts dMSA creation rights on vulnerable Organizational Units OUs to escalate privileges in Active Directory environments BadSuccessor vulnerability – CVE-2025-53779. Overview Invoke-BadSuccessor automates a privilege escalation attack chain ...
Active-Directory-BadSuccessor
Active-Directory-BadSuccessor Resumen En esta sala, exploramos la técnica de escalada de privilegios BadSuccessor, una vulnerabilidad que abusa de las Cuentas de Servicio Administradas Delegadas dMSA en Active Directory. El ataque permite a un usuario con suficiente control sobre un objeto dMSA...
CVE-2019-12002
A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...
EUVD-2019-3657
Malware in sbrugna...
EUVD-2009-4829
Malware in sbrugna...
EUVD-2019-3658
Malware in sbrugna...
EUVD-2012-0729
Malware in sbrugna...
EUVD-2017-17899
Malware in sbrugna...
EUVD-2017-17900
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986910)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986910 advisory. In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix error handling in ath10ksetupmsaresources The devicenode pointer is returned by...
EUVD-2024-19981
Malicious code in bioql PyPI...
EUVD-2023-35250
Malicious code in bioql PyPI...
CVE-2024-45493
An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 Fixed in 7.0.0. The FieldServer Gateway has internal users, whose access is supposed to be restricted to login locally on the device. However, an attacker can bypass the check for this, which might allow them to authenticate...
CVE-2024-45494
An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 Fixed in 7.0.0. The FieldServer Gateway has an internally used shared administrative user account on all devices. The authentication for this user is implemented through an unsafe shared secret that is static in all affected...
CVE-2024-45495
MSA FieldServer Gateway 5.0.0 through 6.5.2 allows cross-origin WebSocket hijacking...
CVE-2023-30910
HPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent interpretation of HTTP requests...
CVE-2019-12001
A remote session reuse vulnerability leading to access restriction bypass was discovered in HPE MSA 2040 SAN Storage; HPE MSA 1040 SAN Storage; HPE MSA 1050 SAN Storage; HPE MSA 2042 SAN Storage; HPE MSA 2050 SAN Storage; HPE MSA 2052 SAN Storage versions: GL225P001 and earlier; GL225P001 and...
DEBIAN-CVE-2022-49213
In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix error handling in ath10ksetupmsaresources The devicenode pointer is returned by ofparsephandle with refcount incremented. We should use ofnodeput on it when done. This function only calls ofnodeput in the regular path...
CVE-2022-49213 ath10k: Fix error handling in ath10k_setup_msa_resources
In the Linux kernel, the following vulnerability has been resolved: ath10k: Fix error handling in ath10ksetupmsaresources The devicenode pointer is returned by ofparsephandle with refcount incremented. We should use ofnodeput on it when done. This function only calls ofnodeput in the regular path...
CVE-2024-45494
An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 Fixed in 7.0.0. The FieldServer Gateway has an internally used shared administrative user account on all devices. The authentication for this user is implemented through an unsafe shared secret that is static in all affected...