CVE-2020-25721

Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...

Samba AD DC did not always rely on the SID

Description Samba as an Active Directory Domain Controller is based on Kerberos, which provides name-based authentication. These names are often then used for authorization. However Microsoft Windows and Active Direcory is SID-based. SIDs in Windows, similar to UIDs in Linux/Unix if managed well...

Sophos UTM WebAdmin SID Command Injection

This module exploits an SID-based command injection in Sophos UTM's WebAdmin interface to execute shell commands as the root user. Module Options msf use exploit/linux/http/sophosutmwebadminsidcmdinjection msf exploitsophosutmwebadminsidcmdinjection show targets ...targets... msf...

Sophos UTM WebAdmin SID Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Sophos UTM WebAdmin SID Command Injection', 'Description' = %q This module exploits an SID-based command injection in Sophos UTM's WebAdmin...

Denial Of Service (DoS)

rustc:sid is vulnerable to denial of service. The Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again...

Denial Of Service (DoS)

rustc:sid is vulnerable to denial of service. The String::retain function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a memory safety violation when other string APIs assume that UTF-8 encoding is used on the...

Denial Of Service (DoS)

qemu:sid is vulnerable to denial of service. The vulnerability exists because the numbuffers being set after the virtqueue elem has been unmapped, allowing an attacker to crash the application through the use after free...

Denial Of Service(DoS)

ccextractor:sid is vulnerable to denial of service. An issue was discovered in GPAC is a use-after-free in the function gfisomboxdel in isomedia/boxfuncs.c...

Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft

ProxyShell Proof of Concept Exploit for Microsoft Exchange CVE...

Man-in-the-middle (MITM)

nbdkit:sid is vulnerable to man-in-the-middle. A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBDOPTSTRUCTUREDREPLY before proxying everything else a client sends to the...

AD Starter Scan - Dangerous Trust Relationship

Binary data adsitrustunsafe.nbin...

Sql injection

SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php...

CVE-2021-26765

SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php...

PT-2021-17129 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 4.0 Description: The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the sid parameter to the "edit-sub.php" endpoint. Recommendations: For PHPGurukul Student...

PHPGurukul Student Record System SQL注入漏洞

PHPGurukul Student Record System is an application. A SQL injection vulnerability exists in PHPGurukul Student Record System version 4.0, which stems from the lack of validation of externally entered SQL statements in the sid parameter of edit-sub.php, and can be exploited by remote attackers to...

Cross-site Scripting (XSS)

otrs2:sid is vulnerable to cross-site scripting. It's possible to collect various information by having an e-mail shown in the overview screen. Attack can be performed by sending specially crafted e-mail to the system and it doesn't require any user intraction...

Man-in-the-middle (MITM)

bluez is vulnerable to Man-in-the-middle MITM. The vulnerability exists in smpcmdpublickey function of bluetooth/smp.c due to the failure of both remote and local non-debug public keys which allows an attacker to identify the Passkey used during pairing...

CVE-2021-24360

The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users contributor+ to perform Blind SQL Injection attacks...

CVE-2021-24360

The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users contributor+ to perform Blind SQL Injection attacks...

WordPress SQL注入漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.Yes/No Chart is a plugin for WordPress. Yes/No Chart WordPress plugin version prior to 1.0.12 suffers from a SQL injection...