CVE-2022-36968

In Progress WSFTP Server prior to version 8.7.3, forms within the administrative interface did not include a nonce to mitigate the risk of cross-site request forgery CSRF attacks...

CVE-2021-36968

Windows DNS Elevation of Privilege Vulnerability...

CVE-2021-36968

CVE-2021-36968 is a Windows DNS Elevation of Privilege vulnerability disclosed in Patch Tuesday 2021. It stems from a failure to properly enforce security restrictions in Windows DNS, enabling local attackers to elevate privileges to SYSTEM when authenticated. Public sources (including Malwarebyt...

Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability

A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such as Azure, Office, BitLocker, and Visual Studio, including an actively...

CVE-2021-36968

creationtimestamp| type| source ---|---|--- 2021-09-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=649 2021-09-15 13:29:06+00:00| seen| https://t.me/truesecator/2104 2021-09-15 16:22:42+00:00| seen| https://t.me/cibsecurity/28894...

KB5005615: Windows 7 and Windows Server 2008 R2 September 2021 Security Update

The remote Windows host is missing security update 5005615 or cumulative update 5005633. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-36955, CVE-2021-36963, CVE-2021-36964,...