134 matches found
CVE-2018-2449
SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in SAP NetWeaver 7.3 - import functionality does not perform authentication checks for valid repository user. This is an unauthenticated functionality that you can use on windows machines to do SMB relaying...
CVE-2018-2449: Improper Authentication
SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in SAP NetWeaver 7.3 - import functionality does not perform authentication checks for valid repository user. This is an unauthenticated functionality that you can use on windows machines to do SMB relaying...
PT-2018-15571
Name of the Vulnerable Software and Affected Versions SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 Description The issue concerns an unauthenticated functionality in the import feature that fails to perform authentication checks for valid repository users. This can be exploited on Windows machin...
CredSSP Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the Credential Security Support Provider protocol CredSSP. An attacker who successfully exploited this vulnerability could relay user credentials and use them to execute code on the target system. CredSSP is an authentication provider which processe...
Relayer - SMB Relay Attack Script
Relayer is an SMB relay Attack Script that automates all the necessary steps to scan for systems with SMB signing disabled and relaying authentication request to these systems with the objective of gaining a shell. Great when performing Penetration testing. Relayer makes use of Unicorn from...
SUSE SLES12 Security Update : dnsmasq (SUSE-SU-2017:2616-1)
This update for dnsmasq fixes the following issues. Remedy the following security issues : - CVE-2017-14491: 2 byte heap based overflow. bsc1060354 - CVE-2017-14492: heap based overflow. bsc1060355 - CVE-2017-14493: stack based overflow. bsc1060360 - CVE-2017-14494: DHCP - info leak. bsc1060361 -...
Animas OneTouch Ping Authentication Bypass Vulnerability (CNVD-2016-08537)
The Animas OneTouch Ping is a medical self-service device for diabetics taking insulin from Animas USA. The Animas OneTouch Ping device uses a customized communication protocol that allows an unauthenticated remote attacker to bypass authentication by relaying the attack and spoofing the affected...
QMTP Open Relay Test
The QMTP/QMQP server accepts relaying. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute i...
Sun Solaris <= 2.5.1 rpc.statd rpc Call Relaying Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/450/info The rpc service rpc.statd, shipped with all major versions of Sun's solaris, is the status monitoring service for NFS file locking. The vulnerability lies in rpc.statd's ability to relay rpc calls to other rpc...
[Tor-ramdisk] Micro Linux distribution whose sole purpose is to securely host a Tor server purely in RAM
Tor-ramdisk is a uClibc-based micro Linux distribution whose sole purpose is to securely host a Tor server purely in RAM. For those not familiar with Tor, it is a system which allows the user to construct encrypted virtual tunnels which are randomly relayed between Tor servers nodes until the...
Nmap NSE 6.01: smtp-open-relay
Attempts to relay mail by issuing a predefined combination of SMTP commands. The goal of this script is to tell if a SMTP server is vulnerable to mail relaying. An SMTP server that works as an open relay, is a email server that does not verify if the user is authorised to send email from the...
CVE-2011-5101
The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam...
Nmap NSE net: smtp-open-relay
Attempts to relay mail by issuing a predefined combination of SMTP commands. The goal of this script is to tell if a SMTP server is vulnerable to mail relaying. An SMTP server that works as an open relay, is a email server that does not verify if the user is authorised to send email from the...
Kaspersky administration Kit SMB relaying attack
Network is automatically scanned and hosts found are automatically connected via SMB with administrative permissions, making it possible SMB relaying attack...
Microsoft telnet NTLM relaying
NTLM relaying attack against telnet client authentication is possible...
QMTP Open Relay
The QMTP/QMQP server that is running on this port allows relaying. Make sure it rejects connections from Internet so that it cannot be used use as an open relay. Otherwise, it may be blacklisted by RBLs or overloaded by spam. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
[SECURITY] Fedora 9 Update: prelude-manager-0.9.14.2-2.fc9
Prelude Manager is the main program of the Prelude Hybrid IDS suite. It is a multithreaded server which handles connections from the Prelude sensors. It is able to register local or remote sensors, let the operator configure them remotely, receive alerts, and store alerts in a database or any...
Microsoft Internet Explorer multiple security vulnerabilities
Code exexuction, multiple memory corruptions, NTLM relaying...