The vulnerability of Intel microprogramming software, related to security configuration errors, allows attackers to disclose protected information.

The vulnerability of Intel microprogramming software is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability affects the implementation of the Kerberos authentication protocol for the isolated software environment AppContainer on Microsoft Windows operating systems. This vulnerability allows a perpetrator to bypass authentication checks.

The vulnerability of the Kerberos authentication protocol for the isolated software environment AppContainer on Microsoft Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the network-based Kerberos authenticati...

GitLab: Stored XSS in Mermaid when viewing Markdown files

Summary GitLab's Mermaid configuration allows an attacker to inject HTML in the rendered Markdown. This can be combined with a CSP bypass using pipeline artifacts to achieve RCE. Steps to reproduce 1. Create a repository on GitLab.com 2. Add the following to .gitlab-ci.yml yaml --- job: script: -...

The vulnerability of the SMB Client component of Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SMB Client component of Microsoft Windows is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Snort intrusion detection system of Cisco Firepower Threat Defense (FTD), which includes network devices like Cisco Catalyst, routers such as ISR and ISA, and the virtual router with integrated ISRv services, allows attackers to compromise the integrity of protected information.

The vulnerability of the Snort intrusion detection system of Cisco Firepower Threat Defense FTD, as well as Cisco Catalyst network devices, ISR and ISA routers, and the integrated-service virtual router ISRv, is related to security configuration errors. Exploiting this vulnerability can allow a...

The vulnerability in the driver for the Early Launch Antimalware (ELAM) security technology of Microsoft Windows allows a malicious actor to bypass security functions.

The vulnerability of the driver for the Early Launch Antimalware ELAM security technology for Microsoft Windows is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass security functions...

The vulnerability of the Microsoft Azure Active Directory cloud platform’s software, related to security configuration errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Microsoft Azure Active Directory software platform is related to security configuration errors. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the Windows operating system’s WLAN service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows WLAN operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Windows Admin Center, related to security configuration errors, allows a hacker to circumvent existing security restrictions.

The vulnerability of the Windows Admin Center management tool is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Windows operating system, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of the Windows operating system is related to errors in security settings. Exploiting this vulnerability can allow a hacker to bypass existing security restrictions...

The vulnerability of Microsoft Visio’s graphical editor, as well as Microsoft Office applications and 365 Apps for Enterprise, is related to security configuration errors, allowing attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

How to install to Citrix ADM a Server Certificate

Steps to install a Server Certificate on Citrix ADM...

Vulnerabilities of Windows operating systems are related to security configuration errors, which allow attackers to bypass existing security mechanisms.

Vulnerabilities of Windows operating systems are related to security configuration errors. Exploiting these vulnerabilities can allow a malicious actor to bypass existing security measures remotely...

The vulnerability of the application control tool: Windows Defender Application Control (WDAC), a PowerShell Core automation tool that allows attackers to gain unauthorized access to protected information.

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core automation tool, is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...

Vulnerability of application control tools: Application control in Windows Defender Application Control (WDAC), a PowerShell Core automation tool, allows attackers to bypass existing security mechanisms.

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core automation tool, is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security measures remotely...

Adobe Magento Commerce Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Reflected Cross-Site Scripting XSS product: Adobe Magento Commerce vulnerable version: 2.4.2 fixed version: 2.4.2 CVE number: CVE-2021-21029 impact: Medium homepage:...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the remote desktop service for Windows operating systems allows attackers to circumvent existing security restrictions and gain unauthorized access to the application.

The vulnerability of the remote desktop service for Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain unauthorized access to the application...

Increasing resilience against Solorigate and other sophisticated attacks with Microsoft Defender

­Even as investigations into the sophisticated attack known as Solorigate are still underway, details and insights about the tools, patterns, and methods used by the attackers point to steps that organizations can take to improve their defenses against similar attacks. Solorigate is a cross-domai...

The vulnerability of the fly-wm window manager, related to security configuration errors, allows attackers to gain access to confidential data.

The vulnerability of the fly-wm window manager is related to security configuration errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...