28003 matches found
KB5005094: Windows Server 2012 Security Update (August 2021)
The remote Windows host is missing security update 5005094 or cumulative update 5005099. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-26425, CVE-2021-26426, CVE-2021-34483,...
TripSpark VEO Transportation - Blind SQL Injection
Exploit Title: TripSpark VEO Transportation - 'editOEN' Blind SQL Injection Google Dork: inhtml:"Student Busing Information" Date: 07/27/2021 Exploit Author: Sedric Louissaint @LKn0w Vendor Homepage: https://www.tripspark.com Software Document Link:...
KLA12244 Microsoft Advisory for Active Directory Certificate Services
Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Windows servers.To prevent NTLM Relay Attacks on networks with NTLM enabled, domain administrators must ensure that services that permit NTLM authentication make use of protections...
KLA12248 Microsoft Advisory (ESU) for Active Directory Certificate Services
Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Microsoft Products Extended Security Update.To prevent NTLM Relay Attacks on networks with NTLM enabled, domain administrators must ensure that services that permit NTLM authenticati...
KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2
KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2 Summary This update addresses the following issue: Temporarily addresses an issue with devices that do not comply with section 3.2.1 of the RFC 4556...
Metasploit Wrap-Up
Eternal Blue improvements Prior to this release Metasploit offered two separate exploit modules for targeting MS17-010, dubbed Eternal Blue. The Ruby module previously only supported Windows 7, and a separate ms17010eternalbluewin8 Python module would target Windows 8 and above. Now Metasploit...
July 13, 2021—KB5004302 (Security-only update)
None None...
July 13, 2021—KB5004285 (Security-only update)
None None...
July 13, 2021—KB5004294 (Monthly Rollup)
None None...
KB5004302: Windows Server 2012 Security Update (July 2021)
The remote Windows host is missing security update 5004302. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...
Microsoft Scripting Engine 缓冲区错误漏洞
Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...
KB5004298: Windows 8.1 and Windows Server 2012 R2 Security Update (July 2021)
The remote Windows host is missing security update 5004298. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...
CVE-2021-27034
A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code...
CVE-2012-0816
CVE-2012-0816 entry is rejected/not used and does not represent an active vulnerability.
CVE-2012-0832
CVE-2012-0832 entry is rejected/not used; withdrawn by its CNA.