Security Updates for Microsoft Dynamics 365 (on-premises) (December 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services. CVE-2023-35621 - A sessio...

Security Updates for Microsoft Office Products (September 2023)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...

Security Updates for Microsoft SharePoint Server 2019 (August 2023)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2023-36890,...

Security Updates for Microsoft SharePoint Server Subscription Edition (August 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive...

Security Updates for Outlook (August 2023)

The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2023-36893...

Security Updates for Microsoft SharePoint Server 2019 (July 2023)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions...

Security Updates for Microsoft SharePoint Server Subscription Edition (July 2023)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security featur...

Security Updates for Outlook (July 2023)

The Microsoft Outlook application installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2023-33151 - A...

Security Updates for Microsoft SharePoint Server 2016 (July 2023)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2023-33159 ...

Security Update for Microsoft Visual Studio Code (June 2023)

The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.79.1. It is, therefore, affected by a session spoofing vulnerability. An attacker can exploit this to perform actions with the privileges of another user. %NASLMINLEVEL 80900 Tenable, Inc. The descripti...

Security Updates for Microsoft Dynamics 365 (on-premises) (April 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple session spoofing vulnerabilities. An attacker can exploit these to perform actions with the privileges of another user. Note that Nessus has not tested for these issues but has instead relie...

Security Updates for Microsoft Excel Products (March 2023)

The Microsoft Excel Products are missing security updates. They are, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2023-23398 - A remote code execution...

Security Updates for Microsoft Dynamics 365 (on-premises) (February 2023)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple session spoofing vulnerabilities. An attacker can exploit these to perform actions with the privileges of another user Note that Nessus has not tested for these issues but has instead relied...

SUSE CVE-2005-3042

miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return...

Security Updates for Microsoft Office Products C2R (December 2021)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-43256, CVE-2021-43875 - An...

Security Updates for Microsoft Office Products C2R (September 2021)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-38650 - A remote code execution vulnerabilit...

SMB-Session-Spoofing - Tool To Create A Fake SMB Session

Welcome! This is a utility that can be compiled with Visual Studio 2019 or newer. The goal of this program is to create a fake SMB Session. The primary purpose of this is to serve as a method to lure attackers into accessing a honey-device. This program comes with no warranty or guarantees. Progr...

Security Updates for Microsoft Skype for Business and Microsoft Lync (April 2022)

The Microsoft Skype for Business or Microsoft Lync installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information...

Security Updates for Microsoft SharePoint Server 2016 (April 2022)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-24472 ...

Security Updates for Microsoft SharePoint Server 2019 (April 2022)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a session spoofing vulnerability. An attacker can exploit this to perform actions with the privileges of another user. %NASLMINLEVEL 70300 C Tenable Network Security, In...