Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource in the form of permissive file permissions on /usr/local/bin/nps and /usr/bin/nps. An attacker can overwrite these executable files. Remediation Upgrade ehang.io/nps/lib/install to...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource in the form of permissive file permissions on /usr/local/bin/nps and /usr/bin/nps. An attacker can overwrite these executable files. Remediation Upgrade...

freunde.obi.de XSS vulnerability

Open Bug Bounty ID: OBB-601078 Description| Value ---|--- Affected Website:| freunde.obi.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Authentication flaw

SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7964

SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...

CVE-2015-7964

Technical details for CVE-2015-7964 are not publicly available in the provided connected documents; no affected products, vulnerable components, or mitigations are specified here. Monitor for updates.

September 12, 2017—KB4038793 (Security-only update)

None None...

Microsoft Windows Multiple Vulnerabilities (KB4038792)

This host is missing a critical security update according to Microsoft KB4038792 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4038788)

This host is missing a critical security update according to Microsoft KB4038788 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

September 12, 2017—KB4038792 (OS Build Monthly Rollup)

None None...

Intrusion Detection Avoidance Payload Generator: NPS_Payload

This script will generate payloads for basic intrusion detection avoidance. It utilizes publicly demonstrated techniques from several different sources. Written by Larry Spohn @Spoonman1091 Payload written by Ben Mauch @Ben0xA aka dirtyben. This tool provides a way to generate a PowerShell payloa...

CVE-2016-0050

Network Policy Server NPS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service RADIUS authentication outage via crafted requests, aka "Network Policy Server RADIUS Implementation Denial o...

CVE-2016-0050

CVE-2016-0050 denotes a DoS in Microsoft Network Policy Server (NPS) caused by misparsing/ improper handling of RADIUS username strings in authentication requests. A remote, unauthenticated attacker can exploit crafted username inputs to trigger a denial-of-service condition on NPS, affecting Win...

Microsoft Windows NPS RADIUS Server Denial of Service Vulnerability (3133043)

This host is missing an important security update according to Microsoft Bulletin MS16-021 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-021: Security update for NPS RADIUS server to address denial of service: February 9, 2016

None None...

Cumulative update for Windows 10: February 9, 2016

None None...

Cumulative update for Windows 10 Version 1511: February 9, 2016

None None...

Denial of service

Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service system hang and RADIUS outage via crafted username strings to 1 Internet Authentication Service IAS or 2 Network Policy Server NPS, aka "Network Policy...

CVE-2015-0015

Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service system hang and RADIUS outage via crafted username strings to 1 Internet Authentication Service IAS or 2 Network Policy Server NPS, aka "Network Policy...

Microsoft Network Policy Server RADIUS Denial of Service (MS15-007; CVE-2015-0015)

A denial of service vulnerability exists in the Network Policy Server NPS. The vulnerability is due to the way the NPS handles username strings. A remote attacker can exploit this issue by sending a specially crafted username string to the NPS...