18 matches found
vulnerability-CVE-2013-3900
이 저장소에는 README가 없습니다...
CVE-2013-3900_Remediation_PowerShell
CVE-2013-3900修复PowerShell 用于修改注册表以修复CVE-2013-3900的脚本。它提供了撤销选项，以防对您的环境造成影响。 步骤 下载脚本，以管理员权限运行，然后重启机器。...
cve-2013-3900-winverifytrust-mitigation
Mitigación de CVE-2013-3900 WinVerifyTrust / EnableCertPaddingCheck Este repositorio contiene un script de PowerShell de remediación y verificación que aborda el hallazgo de Tenable/Nessus: ID de Plugin: 166555 Nombre: Mitigación de Validación de Firma WinVerifyTrust CVE-2013-3900...
vulnerability-remediation-cve-2013-3900
🛡️ CVE-2013-3900（WinVerifyTrust 署名検証）の修復 📝 プロジェクト概要 このプロジェクトは、実際の 脆弱性管理ワークフロー を示しています。Azure VM を使用して、高深刻度の署名検証の欠陥を追跡し、PowerShell で手動確認を行い、レジストリベースの修正を展開して、不正なコード実行からシステムを強化しました。 問題 Windows の WinVerifyTrust...
CVE-2013-3900-Remediation-Script
root@kitploit: CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key...
CVE-2013-3900-PowerShell-PoC
CVE-2013-3900-PowerShell-PoC このPoCは教育および研究目的のみで提供されます。 作者は、このコードの誤用またはそれによって生じた損害について一切の責任を負いません。 このPowerShellスクリプトは、CVE-2013-3900で説明されている攻撃をシミュレートするためのテストツールです。...
cve-2013-3900-remediation-report
修复报告：CVE-2013-3900 – Windows Server 2019（Azure VM）上的WinVerifyTrust漏洞 概述 在最近一次使用Tenable Nessus进行的经过身份验证的漏洞评估中，在托管于Microsoft Azure 的Windows Server 2019 虚拟机上检测到了CVE-2013-3900。此次扫描利用了管理员凭据，从而能够深入检查系统的配置和注册表设置。...
CVE-2013-3900
이 저장소에는 README가 없습니다...
nessus-vulnerability-scanning-lab
Nessus 취약점 스캐닝 랩 — Azure 전체 취약점 관리 수명 주기 — 스캔, 발견, 수정, 검증 — Terraform으로 배포된 전용 Nessus 스캐너를 사용하여 실제 Azure Active Directory 랩 환경에서 실행합니다. 이 랩이 보여주는 것 기존 Azure AD 랩 환경에 전용 Ubuntu 24.04 스캐너 VM을 배포하고, 도메인 컨트롤러, 파일 서버, 도메인 가입 클라이언트를 대상으로 인증되지 않은 기준 스캔과 자격 증명 스캔을 실행했습니다. 결과를 분석하고, PowerShell 레지스트리 강화를 통...
CVE-2013-3900-WinTrustVerify
Windows-Cert-Padding-Check...
WinVerifyTrust Signature Validation Vulnerability
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
KLA12432 RCE vulnerability in Microsoft Products (ESU)
Remote code execution vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2013-3900 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows...
CVE-2013-3900
creationtimestamp| type| source ---|---|--- 2021-11-23 11:27:03+00:00| published-proof-of-concept| https://t.me/cKure/8191 2022-01-05 12:37:10+00:00| seen| MISP/a8009d56-7dab-4b65-a6ee-3caf2773c960 2022-01-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=725 2023-06-10...
CVE-2013-3900
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
CVE-2013-3900 WinVerifyTrust Signature Validation Vulnerability
...
CVE-2013-3900
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
CVE-2013-3900
CVE-2013-3900 describes a remote code execution in the WinVerifyTrust Authenticode verification for PE files. An attacker could modify a signed executable to execute code without invalidating the signature, potentially gaining full control of the system. Microsoft republished this CVE in the Secu...
