CVE-2013-3900

此存储库没有 README。...

CVE-2013-3900-PowerShell-PoC

CVE-2013-3900-PowerShell-PoC 本PoC仅用于教育和研究目的。 作者不对因使用此代码而导致的滥用或损害承担任何责任。 此PowerShell脚本是一个用于模拟CVE-2013-3900所描述攻击的测试工具。 CVE-2013-3900涉及Windows中的Authenticode机制，其中PE签名（EXE/DLL文件）可能在证书部分包含额外数据（填充）。在旧版或默认的Windows设置中，此类修改不会使签名失效，从而允许在文件中添加恶意代码，同时保留其“已签名”状态。...

cve-2013-3900-remediation-report

修复报告：CVE-2013-3900 – Windows Server 2019（Azure VM）上的WinVerifyTrust漏洞 概述 在最近一次使用Tenable Nessus进行的经过身份验证的漏洞评估中，在托管于Microsoft Azure 的Windows Server 2019 虚拟机上检测到了CVE-2013-3900。此次扫描利用了管理员凭据，从而能够深入检查系统的配置和注册表设置。...

CVE-2013-3900_Remediation_PowerShell

CVE-2013-3900RemediationPowerShell Script para realizar cambios en el registro para corregir CVE-2013-3900. Incluye una opción para deshacer los cambios en caso de que algo falle en su entorno. Pasos Descargue el script, ejecútelo con privilegios de administrador y reinicie el equipo...

Remediating-CVE-2013-3900-EnableCertPaddingCheck-

Informe de Remediación: CVE-2013-3900 en Windows Server 2019 VM de Azure Remediación de CVE-2013-3900 EnableCertPaddingCheck Durante un escaneo de vulnerabilidades autenticado con Tenable/Nessus, identifiqué CVE-2013-3900 en mi instancia de Windows Server 2019 Datacenter alojada en Microsoft Azur...

CVE-2013-3900

此存储库没有 README。...

cve-2013-3900-winverifytrust-mitigation

CVE-2013-3900 缓解措施 WinVerifyTrust / EnableCertPaddingCheck 本仓库包含一个 PowerShell 修复与验证脚本，用于解决 Tenable/Nessus 扫描发现的问题： 插件 ID： 166555 名称： WinVerifyTrust 签名验证 CVE-2013-3900 缓解措施 EnableCertPaddingCheck 该脚本通过设置以下注册表值来强制启用 WinVerifyTrust 证书填充检查： EnableCertPaddingCheck DWORD = 1 在 64 位系统上，扫描器要求该值同时在本机注册表路径...

CVE-2013-3900-WinTrustVerify

Windows-Cert-Padding-Check...

CVE-2013-3900-Remediation-Script

root@kitploit: CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key...

vulnerability-remediation-cve-2013-3900

🛡️ Remediación de CVE-2013-3900: Validación de Firmas WinVerifyTrust 📝 Resumen del Proyecto Este proyecto demuestra un Flujo de Trabajo de Gestión de Vulnerabilidades del mundo real. Usando una VM de Azure, rastreé una falla de validación de firmas de alta severidad, la confirmé manualmente con...

nessus-vulnerability-scanning-lab

Laboratorio de Escaneo de Vulnerabilidades con Nessus — Azure Ciclo completo de gestión de vulnerabilidades: escanear, encontrar, corregir, verificar — ejecutado contra mi entorno de laboratorio de Azure Active Directory en vivo usando un escáner Nessus dedicado desplegado con Terraform. Qué...

vulnerability-CVE-2013-3900

This repository does not have a README...

Amazon Linux 2 : postgresql, --advisory ALAS2-2026-3900 (ALAS-2026-3900)

The version of postgresql installed on the remote host is prior to 9.2.24-8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3900 advisory. Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to caus...

Fedora 42 : texlive-base / xpdf (2025-e72c726192)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-e72c726192 advisory. Update to 4.06. Lots of bugfixes, but notably, security fixes for the following CVEs: CVE-2024-2971 CVE-2024-3247 CVE-2024-3248 CVE-2024-3900...

Slackware: Security Advisory (SSA:2025-319-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ECHO-3900-0B28-C8B3 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2024-3900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText. CVE-2024-3900 Note that Nessus relies on the presence of t...

Linux Distros Unpatched Vulnerability : CVE-2023-3900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. An invalid...

Linux Distros Unpatched Vulnerability : CVE-2019-3900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An infinite loop issue was found in the vhostnet kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handlerx. It cou...

CVE-2022-3900

The Cooked Pro WordPress plugin before 1.7.5.7 does not properly validate or sanitize the recipeargs parameter before unserializing it in the cookedloadmore action, allowing an unauthenticated attacker to trigger a PHP Object injection vulnerability...