CVE-2021-36959: Undefined Security Weakness

Windows Authenticode Spoofing Vulnerability...

Microsoft Windows Multiple Vulnerabilities (KB5005573)

This host is missing a critical security update according to Microsoft KB5005573 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows Authenticode Spoofing Vulnerability

...

Microsoft Windows Authenticode security vulnerabilities

Authenticode is Trail of Bits open source a small cross-platform library . Used to partially verify Authenticode digital signatures. A security vulnerability exists in Microsoft Windows Authenticode. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windo...

PT-2021-6307 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in the implementation of the Windows Authenticode code signing technology in the Microsoft Windows...

SigFlip - A Tool For Patching Authenticode Signed PE Files (Exe, Dll, Sys ..Etc) Without Invalidating Or Breaking The Existing Signature

SigFlip is a tool for patching authenticode signed PE files exe, dll, sys ..etc in a way that doesn't affect or break the existing authenticode signature, in other words you can change PE file checksum/hash by embedding data i.e shellcode without breaking the file signature, integrity checks or P...

CVE-2021-33782

Windows Authenticode Spoofing Vulnerability...

CVE-2021-33782

Windows Authenticode Spoofing Vulnerability...

Spoofing

Windows Authenticode Spoofing Vulnerability...

CVE-2021-33782

Windows Authenticode Spoofing Vulnerability...

CVE-2021-33782 Windows Authenticode Spoofing Vulnerability

...

CVE-2021-33782

Technical details for CVE-2021-33782 are not publicly available in the provided documents. No confirmed impact or remediation are described here; monitor connected sources for updates.

CVE-2021-33782: Undefined Security Weakness

Windows Authenticode Spoofing Vulnerability...

Windows Authenticode Spoofing Vulnerability

...

PT-2021-5052

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in the representation of information by the user interface in the implementation of the Windows Authenticode code signing technology in the Microsoft Windows...

Microsoft Windows Authenticode security vulnerabilities

Microsoft Windows Authenticode is a code-signing technology from Microsoft Corporation USA that identifies the publisher of Authenticode-signed software. A security vulnerability exists in Microsoft Windows Authenticode. The following products and editions are affected:Windows 10 Version 1809 for...

Microsoft Windows UAC Privilege Escalation

Hi @ll, Microsoft still ships Windows with and lets it create user-writable directories below the "Windows" directory %SystemRoot%\ -- despite that, with exception of %SystemRoot%\Temp, they are all used to store DATA and SHOULD have been placed below %ProgramData% alias %SystemDrive%\ProgramData...

Microsoft Windows UAC Privilege Escalation Vulnerability

Hi @ll, Microsoft still ships Windows with and lets it create user-writable directories below the "Windows" directory %SystemRoot%\ -- despite that, with exception of %SystemRoot%\Temp, they are all used to store DATA and SHOULD have been placed below %ProgramData% alias %SystemDrive%\ProgramData...

Cisco AnyConnect Secure Mobility Client 4.8.01090 Privilege Escalation Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows version 4.8.01090 suffer from a privilege escalation vulnerability due to insecure handling of path names. ------------------------------------------------------------------------ Cisco AnyConnect elevation of privileges due to insecure handling...

Microsoft Windows cryptoapi - SymCrypt Modular Inverse Algorithm Denial of Service Exploit

There's a bug in the SymCrypt multi-precision arithmetic routines that can cause an infinite loop when calculating the modular inverse on specific bit patterns with bcryptprimitives!SymCryptFdefModInvGeneric. I've been able to construct an X.509 certificate that triggers the bug. I've found that...