Exploit for CVE-2020-1034

This is a PoC Proof of Concept exploit for CVE-2020-1034, a vulnerability discovered by Microsoft and fixed on August 9, 2020. The exploit targets an unpatched Windows 10 2004, build 19041.488. The exploit code is written in C++ and uses the Windows API to manipulate the system's Event Tracing fo...

Shopify: [h1-2102] FQDN takeover on all Shopify wholesale customer domains by trailing dot (RFC 1034)

Summary: Due to a missing domain format check in Shopify's wholesale functionality, it is possible to serve arbitrary content on the customer's domain through existing DNS records already configured to work with Shopify. I only tested with domains that I own but as far as I understand, this would...

EulerOS 2.0 SP9 : p11-kit (EulerOS-SA-2021-1034)

According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the...

CVE-2020-1034

creationtimestamp| type| source ---|---|--- 2020-10-20 14:27:18+00:00| published-proof-of-concept| Telegram/4SXK41AuNvfHoBMLIoopOBVAez5UcGp1ZVv-o0wdupqYUOI 2021-03-13 12:57:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2901 2024-09-10 16:38:59+00:00|...

CVE-2020-1034

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially...

CVE-2020-1034

Technical details specific to CVE-2020-1034, including affected products, root cause, and fixes, are not provided in the connected documents. Monitor for official updates from Microsoft Security Update Guide and MSKB posts for this CVE.

RHEL 7 : doxygen (RHSA-2020:1034)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1034 advisory. Doxygen can generate an online class browser in HTML and/or a reference manual in LaTeX from a set of documented source files. The documentation is...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2017-1034)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2019-1034)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Remote code execution

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1034...

CVE-2019-1034

CVE-2019-1034 affects Microsoft Word/Office where in-memory handling of objects can be exploited to run remote code after a user opens a crafted file. Exploitation relies on social/vector delivery (email or web), with the attacker gaining the same rights as the logged-on user. The vulnerability i...

CVE-2019-1034 Microsoft Word Remote Code Execution Vulnerability

...

Microsoft Office Multiple Remote Code Execution Vulnerabilities (Jun 2019) - Mac OS X

This host is missing an important security update for Microsoft Office 2016/2019 on Mac OS X according to Microsoft security update June 2019 SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Description of the security update for SharePoint Foundation 2013: June 11, 2019

Description of the security update for SharePoint Foundation 2013: June 11, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...

Security Updates for Microsoft Word Products (June 2019)

The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the...

CVE-2018-1034

Affected product: Microsoft SharePoint Server. Vulnerability: elevation of privilege via a specially crafted web request, caused by improper sanitization of input. Root cause (as described): SharePoint Server does not properly sanitize crafted requests, enabling authenticated attackers to escalat...

CVE-2018-1034

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint. This CVE ID is unique fr...

Microsoft SharePoint Server CVE-2018-1034 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

ibtimes.co.uk XSS vulnerability

Vulnerable URL: http://www.ibtimes.co.uk/multimedia/tool?idids=1%3Cimg%20src%3da%20onerror%3dalert/OPENBUGBOUNTY/%3E%3Ch1%3EXSS%2bSQLI%3C/h1%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1034 VIP website...

openSUSE Security Update : libqt4 (openSUSE-2016-1034)

This update for libqt4 fixes the following issues : Various unsafe SSL ciphers have been disabled in the standard SSL classes. Also the RC4 based ciphers have been disabled. bsc865241 This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL 70300 C Tenable Network...