Lucene search
+L

23 matches found

Positive Technologies
Positive Technologies
•added 2026/07/28 12:00 a.m.•28 views

PT-2026-65629

Name of the Vulnerable Software and Affected Versions samba affected versions not specified Description Authenticated LDAP access to internal LDB special DNs Distinguished Names allows for a complete domain takeover. This occurs when an authenticated user can access specific internal database...

8.8CVSS5.8AI score0.00803EPSS
SaveExploits1References81
Positive Technologies
Positive Technologies
•added 2026/07/28 12:00 a.m.•26 views

PT-2026-65631

Name of the Vulnerable Software and Affected Versions Samba CTDB affected versions not specified Description Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes t...

8.8CVSS5.8AI score0.00803EPSS
SaveExploits1References91
Positive Technologies
Positive Technologies
•added 2026/07/28 12:00 a.m.•17 views

PT-2026-65630

Name of the Vulnerable Software and Affected Versions Samba Active Directory Domain Controller AD DC affected versions not specified Description An issue combining LDAP filter injection and improper authorization checks exists when processing LDAP Compare requests. The software fails to properly...

8.8CVSS5.7AI score0.00803EPSS
SaveExploits1References85
Positive Technologies
Positive Technologies
•added 2026/07/28 12:00 a.m.•31 views

PT-2026-65627

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description An out-of-bounds read flaw exists in the Kerberos Key Distribution Center KDC password change kpasswd service. The issue occurs when the server processes a malformed ASN.1-encoded Kerberos...

8.8CVSS5.7AI score0.00803EPSS
SaveExploits1References85
CNNVD
CNNVD
•added 2026/02/11 12:00 a.m.•35 views

Nsasoft RemShutdown 安全漏洞

Nsasoft RemShutdown is a remote shutdown and management tool developed by the US company Nsasoft. Version 2.9.0.0 of Nsasoft RemShutdown contains a security vulnerability, which stems from a buffer overflow in the Name registration field. This vulnerability may lead to the application crashing...

7.5CVSS6.1AI score0.00446EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/11 12:00 a.m.•2 views

CVE-2020-37205: Buffer Copy without Checking Size of Input

RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' registration field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash...

7.5CVSS6AI score0.00446EPSS
SaveExploits1References4
osv-ubuntu
osv-ubuntu
•added 2025/10/15 12:00 a.m.•13 views

UBUNTU-CVE-2025-10230

A flaw was found in Samba, in the front-end WINS hook handling: NetBIOS names from registration packets are passed to a shell without proper validation or escaping. Unsanitized NetBIOS name data from WINS registration packets are inserted into a shell command and executed by the Samba Active...

10CVSS8.2AI score0.39769EPSS
SaveExploits2References4
Code423n4
Code423n4
•added 2023/03/20 12:00 a.m.•14 views

Implementation error in Namespace.fuse() leads to a wrong unicode representation

Lines of code Vulnerability details Impact The font class of a tile will be always considered as 0 emoji when a user registers a name. Proof of Concept To register a name, fuse is used taking as input the data of the characters. The name to register is a string created by converting the character...

6.8AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/02/15 6:10 a.m.•15 views

SUSE CVE-2007-5398

Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...

9.3CVSS8.3AI score0.11396EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/04/28 12:00 a.m.•5 views

PT-2022-28266

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw in Keycloak allows for IDN homograph attacks, enabling a malicious user to register a name that already exists and then trick an admin into granting extra privileges. The highest thre...

5.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/06/01 12:00 a.m.•3 views

PT-2021-20407

Name of the Vulnerable Software and Affected Versions: Red Hat Single Sign-On version 7.4 Description: A flaw was found in the software where IDN homograph attacks are possible, allowing a malicious user to register with a name already registered and potentially trick an administrator into granti...

5.3CVSS0.00774EPSS
SaveExploits0References6
CVE
CVE
•added 2020/01/02 7:20 p.m.•102 views

CVE-2014-0183

CVE-2014-0183 affects Katello as shipped with Red Hat Subscription Asset Manager 1.4, vulnerable to cross-site scripting via HTML in the system name during registration. Root cause: HTML in system name not properly sanitized. Impact: potential XSS through the registration flow. Exploitation detai...

6.1CVSS5.9AI score0.00662EPSS
SaveExploits0References2Affected Software1
zdt
zdt
•added 2010/06/20 12:00 a.m.•30 views

webdesignsolutions SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== webdesignsolutions SQL Injection Vulnerability ============================================== Web Design Solution, offering a wide range of affordable Web Design, Logo Design, online shopping syst...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2009/01/28 12:00 a.m.•35 views

SuSE Update for samba SUSE-SA:2007:065

Check for the Version of samba OpenVAS Vulnerability Test $Id: gbsuse2007065.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for samba SUSE-SA:2007:065 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

9.3CVSS8.7AI score0.11396EPSS
SaveExploits2References1
NVD
NVD
•added 2007/11/16 6:46 p.m.•28 views

CVE-2007-5398

Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...

9.3CVSS7.9AI score0.11396EPSS
SaveExploits1References51
UbuntuCve
UbuntuCve
•added 2007/11/16 6:46 p.m.•34 views

CVE-2007-5398

Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...

9.3CVSS7.8AI score0.11396EPSS
SaveExploits1References2
osv-debian
osv-debian
•added 2007/11/16 6:46 p.m.•7 views

DEBIAN-CVE-2007-5398

Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...

9.3CVSS9.6AI score0.11396EPSS
SaveExploits1References1
Prion
Prion
•added 2007/11/16 6:46 p.m.•51 views

Stack overflow

Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...

9.3CVSS8AI score0.11396EPSS
SaveExploits1References51Affected Software1
Cvelist
Cvelist
•added 2007/11/16 6:00 p.m.•35 views

CVE-2007-5398

Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...

9.9AI score0.11396EPSS
SaveExploits1References51
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/16 12:00 a.m.•7 views

CVE-2007-5398: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the replynetbiospacket function in nmbd/nmbdpackets.c in nmbd in Samba 3.0.0 through 3.0.26a, when operating as a WINS server, allows remote attackers to execute arbitrary code via crafted WINS Name Registration requests followed by a WINS Name Query request...

9.3CVSS6.8AI score0.11396EPSS
SaveExploits1References2
Rows per page
Query Builder