1683 matches found
samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token
A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache...
KB5007233: Windows 7 and Windows Server 2008 R2 Security Update (November 2021)
The remote Windows host is missing security update 5007233 or cumulative update 5007236. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-38631, CVE-2021-38665,...
HP Print and Scan Doctor has an elevation of privilege vulnerability
HP Print and Scan Doctor is a free tool for Windows from Hewlett-Packard HP that helps solve printing and scanning problems. HP Print and Scan Doctor has a security vulnerability that could be exploited by an attacker to potentially allow local privilege escalation...
New Microsoft Sysmon report in VirusTotal improves security
Today, following the 25th year anniversary of Microsoft Sysinternals, we are announcing the general availability of a new Microsoft Sysmon report in VirusTotal. Whether you’re an IT professional or a developer, you’re probably already using Microsoft Sysinternals utilities to help you manage,...
CVE-2021-41338
Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability...
Privilege escalation
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
Security feature bypass
Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability...
Privilege escalation
Windows AppX Deployment Service Elevation of Privilege Vulnerability...
Security feature bypass
Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability...
October 12, 2021—KB5006670 (OS Builds 19041.1288, 19042.1288, and 19043.1288)
None None...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Description of the security update for Office Web Apps Server 2013: October 12, 2021 (KB5002036)
None None...
Design/Logic Flaw
Jenkins 2.314 and earlier, LTS 2.303.1 and earlier accepts names of jobs and other entities with a trailing dot character, potentially replacing the configuration and data of other entities on Windows...
samba: Negative idmap cache entries can cause incorrect group entries in the Samba file server process token
A flaw was found in samba. The Samba smbd file server must map Windows group identities SIDs into unix group ids gids. The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache...
Google Warns of a New Way Hackers Can Make Malware Undetectable on Windows
Cybersecurity researchers have disclosed a novel technique adopted by a threat actor to deliberately evade detection with the help of malformed digital signatures of its malware payloads. "Attackers created malformed code signatures that are treated as valid by Windows but are not able to be...
Concealed Position - Bring Your Own Print Driver Privilege Escalation Tool
Concealed Position is a local privilege escalation attack against Windows using the concept of "Bring Your Own Vulnerability". Specifically, Concealed Position CP uses the as designed package point and print logic in Windows that allows a low privilege user to stage and install printer drivers. C...
CVE-2021-31844
A buffer overflow vulnerability in McAfee Data Loss Prevention DLP Endpoint for Windows prior to 11.6.200 allows a local attacker to execute arbitrary code with elevated privileges through placing carefully constructed Ami Pro .sam files onto the local system and triggering a DLP Endpoint scan...
Remote code execution
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability...
