282 matches found
Microsoft Windows Authentication Methods 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Authentication Methods. An attacker could exploit this vulnerability to cause a denial of service. The following...
CVE-2023-35329: Uncontrolled Resource Consumption
Windows Authentication Denial of Service Vulnerability...
PT-2023-3864 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Windows Authentication component of the Windows operating system. It can be exploited by a remote attacker to launch a...
Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP
Microsoft Patch Tuesday June 2023: Edge type confusion, Git RCE, OneNote Spoofing, PGM RCE, Exchange RCE, SharePoint EoP. Hello everyone! This episode will be about Microsoft Patch Tuesday for June 2023, including vulnerabilities that were added between May and June Patch Tuesdays. Alternative...
The vulnerability of the Windows Authentication component in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the Windows Authentication component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2023-29364: Integer Overflow or Wraparound
Windows Authentication Elevation of Privilege Vulnerability...
The vulnerability of the NTLM network authentication protocol for Windows operating systems allows attackers to circumvent security restrictions and gain increased privileges.
The vulnerability of the NTLM network authentication protocol for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to circumvent security restrictions and enhance their privileges...
Yokogawa Electric CENTUM series vulnerable to cleartext storage of sensitive information
Overview CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information CWE-312, CVE-2023-26593. Yokogawa Electric Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact If an attacker who can...
SUSE CVE-2014-0015
cURL and libcurl 7.10.6 through 7.34.0, when more than one authentication method is enabled, re-uses NTLM connections, which might allow context-dependent attackers to authenticate as other users via a request...
JSA10471 - Out of Cycle Security Bulletin: Pulse Connect Secure (PCS) Network Connect Credential Provider Issue
Last Modified Date Aug 24, 2026 12:35:29 AM...
The vulnerability of the Windows Authentication component in Microsoft Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Authentication component in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted data...
Remote code execution
Windows Authentication Remote Code Execution Vulnerability...
CVE-2023-21539 Windows Authentication Remote Code Execution Vulnerability
...
CVE-2023-21539 Windows Authentication Remote Code Execution Vulnerability
...
PT-2023-1161 · Microsoft · Windows Authentication +1
Name of the Vulnerable Software and Affected Versions: Windows Authentication affected versions not specified Description: The issue is related to insufficient input validation in the Windows Authentication component, allowing remote attackers to execute arbitrary code by using specially crafted...
CVE-2023-21539: Out-of-bounds Read
Windows Authentication Remote Code Execution Vulnerability...
SAP Solution Manager 安全漏洞
SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...
The vulnerability in the implementation of the Windows operating system’s Network Authentication Protocol NTLM allows attackers to perform spoofing attacks.
The vulnerability of the Windows operating system’s Network Authentication Protocol NTLM implementation lies in the ability to bypass authentication through spoofing attacks. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...
GHSA-P2JH-44QJ-PF2V Exfiltration of hashed SMB credentials on Windows via file:// redirect
Impact When following a redirect, Electron delays a check for redirecting to file:// URLs from other schemes. The contents of the file is not available to the renderer following the redirect, but if the redirect target is a SMB URL such as file://some.website.com/, then in some cases, Windows wil...