20 matches found
nessus-vulnerability-scanning-lab
Nessus Vulnerability Scanning Lab — Azure Full vulnerability management lifecycle — scan, find, fix, verify — executed against my live Azure Active Directory lab environment using a dedicated, Terraform-deployed Nessus scanner. What This Lab Demonstrates I deployed a dedicated Ubuntu 24.04 scanne...
CVE-2013-3900-WinTrustVerify
Windows-Cert-Padding-Check...
vulnerability-CVE-2013-3900
This repository does not have a README...
CVE-2013-3900
This repository does not have a README...
cve-2013-3900-winverifytrust-mitigation
CVE-2013-3900 Mitigation WinVerifyTrust / EnableCertPaddingCheck This repository contains a PowerShell remediation + verification script that addresses Tenable/Nessus finding: Plugin ID: 166555 Name: WinVerifyTrust Signature Validation CVE-2013-3900 Mitigation EnableCertPaddingCheck The script...
CVE-2013-3900-Remediation-Script
CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key function...
vulnerability-remediation-cve-2013-3900
🛡️ Remediation of CVE-2013-3900: WinVerifyTrust Signature Validation 📝 Project Overview This project demonstrates a real-world Vulnerability Management Workflow. Using an Azure VM, I hunted down a high-severity signature validation flaw, confirmed it manually via PowerShell, and deployed a...
CVE-2013-3900-PowerShell-PoC
CVE-2013-3900-PowerShell-PoC This PoC is provided for educational and research purposes only. The author takes no responsibility for misuse or damage caused by this code. This PowerShell script is a testing tool for simulating the attack described in CVE-2013-3900. CVE-2013-3900 concerns the...
cve-2013-3900-remediation-report
Remediation Report: CVE-2013-3900 – WinVerifyTrust Vulnerability on Windows Server 2019 Azure VM Overview During a recent authenticated vulnerability assessment conducted using Tenable Nessus, CVE-2013-3900 was detected on a Windows Server 2019 virtual machine hosted in Microsoft Azure. This scan...
CVE-2013-3900_Remediation_PowerShell
CVE-2013-3900RemediationPowerShell Script to make changes on registry to fix CVE-2013-3900. It comes with an option to undo in case it breaks something on your environment. Steps Download the script, run it with Admin Privileges, reboot the machine...
Remediating-CVE-2013-3900-EnableCertPaddingCheck-
Remediation Report: CVE-2013-3900 on Windows Server 2019 Azure VM Remediating CVE-2013-3900 EnableCertPaddingCheck During an authenticated vulnerability scan using Tenable/ Nessus, I identified CVE-2013-3900 on my Windows Server 2019 Datacenter instance hosted in Microsoft Azure. The scan utilize...
CVE-2013-3900
This repository does not have a README...
WinVerifyTrust Signature Validation Vulnerability
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
KLA12432 RCE vulnerability in Microsoft Products (ESU)
Remote code execution vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2013-3900 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows...
CVE-2013-3900
creationtimestamp| type| source ---|---|--- 2021-11-23 11:27:03+00:00| published-proof-of-concept| https://t.me/cKure/8191 2022-01-05 12:37:10+00:00| seen| MISP/a8009d56-7dab-4b65-a6ee-3caf2773c960 2022-01-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=725 2023-06-10...
CVE-2013-3900
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
CVE-2013-3900
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
CVE-2013-3900
CVE-2013-3900 describes a remote code execution in the WinVerifyTrust Authenticode verification for PE files. An attacker could modify a signed executable to execute code without invalidating the signature, potentially gaining full control of the system. Microsoft republished this CVE in the Secu...
