CVE-2021-28325

Windows SMB Information Disclosure Vulnerability...

CVE-2021-28324

Windows SMB Information Disclosure Vulnerability...

Microsoft Windows SMB Server 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in SMB in Microsoft Windows and Windows...

PT-2021-2623 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Server Message Block SMB protocol in Microsoft Windows, which lacks sufficient protection of service data. This can allow a remote attacker...

Microsoft Windows SMB 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in SMB in Microsoft Windows and Windows...

PT-2021-2636 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling memory objects in the implementation of the Microsoft Server Message Block SMB network protocol in Windows operating systems. This can allow a...

The vulnerability in the implementation of SMB and AFP network protocol functions in the My Cloud OS operating systems allows a perpetrator to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the SMB and AFP network protocol implementations in My Cloud OS operating systems is related to incorrect handling of symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or execute arbitrary code...

PortSwigger Burp Suite 安全漏洞

PortSwigger Burp Suite is an application from PortSwigger UK. Software for packet-catching proxies. A security vulnerability exists in PortSwigger Burp Suite that stems from an inability to block NetNTLM hashes on Windows systems with outbound SMB...

Purple Fox Rootkit Can Now Spread Itself to Other Windows Computers

Purple Fox , a Windows malware previously known for infecting machines by using exploit kits and phishing emails, has now added a new technique to its arsenal that gives it worm-like propagation capabilities. The ongoing campaign makes use of a "novel spreading technique via indiscriminate port...

The vulnerability of the SMB1 protocol implementation in Samba network communication software lies in the use of memory after it is freed. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SMB1 protocol implementation in Samba networking software lies in the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the SMB1 protocol implementation in Samba network communication software is related to security flaws, allowing attackers to compromise data integrity.

The vulnerability of the SMB1 protocol implementation in the Samba networking software package is related to security flaws. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

metasploit-framework

This is an exploit module for the Metasploit Framework, a penetration testing tool. The module is designed to exploit a vulnerability in a specific target, which is not explicitly stated in the provided code. However, based on the code and the context, it appears that the target is a Windows...

CVE-2021-3310

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

CVE-2021-26989

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticated attacker to cause a Denial of Service DoS on clustered Data ONTAP configured for SMB access...

CVE-2021-26989

Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticated attacker to cause a Denial of Service DoS on clustered Data ONTAP configured for SMB access...

Netapp Clustered Data ONTAP 安全漏洞

Netapp Clustered Data ONTAP is a storage operating system for clustered mode from NetApp USA. A security vulnerability exists in Clustered Data ONTAP that could allow a remote authenticated attacker to cause a denial of service DoS to a clustered data ONTAP configured for SMB access. The followin...

ALBA-2021:0555 samba bug fix and enhancement update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Bug Fixes and Enhancements: DFS links broken in 4.12 BZ1903555...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

This is a proof-of-concept PoC exploit for CVE-2020-0796, also known as SMBGhost, a pre-authentication remote code execution vulnerability in Windows SMBv3. The exploit is written in Python and uses the SMB protocol to inject shellcode into the Windows kernel. The shellcode is generated from a...

PT-2021-14537 · Sap · Sap Netweaver Master Data Management

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Master Data Management versions 7.10, 710, and 710.750 Description: The issue arises when security guidelines for SAP NetWeaver Master Data Management running on Windows have not been thoroughly reviewed. This oversight might...

Panorama NHIServiSignAdapter Input Validation Error Vulnerability

Panorama NHIServiSignAdapter is a security control component for panoramic surveillance devices from China Panorama. A security vulnerability exists in NHIServiSignAdapter, which stems from a failure of the digest generation function to validate the path to the source file, resulting in SMB...