28507 matches found
August 10, 2021—KB5005106 (Security-only update)
None None...
August 10, 2021—KB5005076 (Monthly Rollup)
None None...
Internet Explorer help
None None...
Microsoft Graphics Component 代码注入漏洞
Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Graphics Component. The following products and versions are affected: Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windows Server 201...
KB5005094: Windows Server 2012 Security Update (August 2021)
The remote Windows host is missing security update 5005094 or cumulative update 5005099. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-26425, CVE-2021-26426, CVE-2021-34483,...
KB5005106: Windows 8.1 and Windows Server 2012 R2 Security Update (August 2021)
The remote Windows host is missing security update 5005106 or cumulative update 5005076. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-26425, CVE-2021-26426, CVE-2021-34483,...
Microsoft Windows Media Foundation权限许可和访问控制问题漏洞
Microsoft Windows Media Foundation is a multimedia development library from Microsoft that aims to provide a unified multimedia solution for the Windows platform, allowing developers to play video and sound files, encode audio and video, or transcode multimedia files. Developers can use Media...
Microsoft Windows 代码注入漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows. The following products and versions are affected:Windows Server 2016,Windows Server 2016 Server Core installation,Windows 8.1 f...
TripSpark VEO Transportation - Blind SQL Injection
Exploit Title: TripSpark VEO Transportation - 'editOEN' Blind SQL Injection Google Dork: inhtml:"Student Busing Information" Date: 07/27/2021 Exploit Author: Sedric Louissaint @LKn0w Vendor Homepage: https://www.tripspark.com Software Document Link:...
KLA12244 Microsoft Advisory for Active Directory Certificate Services
Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Windows servers.To prevent NTLM Relay Attacks on networks with NTLM enabled, domain administrators must ensure that services that permit NTLM authentication make use of protections...
KLA12248 Microsoft Advisory (ESU) for Active Directory Certificate Services
Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Microsoft Products Extended Security Update.To prevent NTLM Relay Attacks on networks with NTLM enabled, domain administrators must ensure that services that permit NTLM authenticati...
KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2
KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2 Summary This update addresses the following issue: Temporarily addresses an issue with devices that do not comply with section 3.2.1 of the RFC 4556...
Metasploit Wrap-Up
Eternal Blue improvements Prior to this release Metasploit offered two separate exploit modules for targeting MS17-010, dubbed Eternal Blue. The Ruby module previously only supported Windows 7, and a separate ms17010eternalbluewin8 Python module would target Windows 8 and above. Now Metasploit...
July 13, 2021—KB5004285 (Security-only update)
None None...
July 13, 2021—KB5004302 (Security-only update)
None None...
July 13, 2021—KB5004294 (Monthly Rollup)
None None...
KB5004302: Windows Server 2012 Security Update (July 2021)
The remote Windows host is missing security update 5004302. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...
KB5004298: Windows 8.1 and Windows Server 2012 R2 Security Update (July 2021)
The remote Windows host is missing security update 5004298. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...
Microsoft Scripting Engine 缓冲区错误漏洞
Microsoft Scripting Engine is a tool from Microsoft Corporation USA that provides a scripting engine for JScript and VBScript. A buffer error vulnerability exists in Microsoft Scripting Engine. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...
CVE-2021-27034
A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code...