The vulnerability in the Windows Desktop Experience software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in the Windows event log system and is related to the processing of specially crafted files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted event log file. If the user...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system’s event log exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely using a specially crafted JNT file...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to a numerical overflow during the processing of event log files. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using a specially crafted JNT file...

ManageEngine EventLog Analyzer 10.6 Build 10060 SQL Query Execution

Exploit Title: ManageEngine EventLog Analyzer SQL query execution Product: ManageEngine EventLog Analyzer Vulnerable Versions: v10.6 build 10060 and previous versions Tested Version: v10.6 build 10060 Windows Advisory Publication: 14/09/2015 Vulnerability Type: authenticated SQL query execution...

Microsoft Windows - CreateObjectTask SettingsSyncDiagnostics Privilege Escalation

Microsoft Windows - CreateObjectTask SettingsSyncDiagnostics Privilege Escalation Source: https://code.google.com/p/google-security-research/issues/detail?id=437 Windows: CreateObjectTask SettingsSyncDiagnostics Elevation of Privilege Platform: Windows 8.1 Update I don’t believe it’s available in...

Microsoft Windows - CreateObjectTask SettingsSyncDiagnostics Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=437 Windows: CreateObjectTask SettingsSyncDiagnostics Elevation of Privilege Platform: Windows 8.1 Update I don’t believe it’s available in earlier Windows versions Class: Elevation of Privilege Summary: The...

PT-2015-2005

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient input validation in the Windows operating system's event log. It can be exploited by a remote attacker using a specially crafted JNT file, potentially...

The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Windows operating system exists due to incorrect handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...

The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Windows operating system exists due to incorrect handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...

The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Windows operating system exists due to incorrect handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...

The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Windows operating system exists due to improper handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...

The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Windows operating system exists due to incorrect handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...

The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Windows operating system exists due to improper handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...

PT-2015-1149

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue arises from incorrect handling of a log file in the Windows operating system. Exploitation occurs when a maliciously crafted event log file is opened. As a result, a remote attacker...

PT-2015-1150

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue arises from incorrect handling of a log file in the Windows operating system. Exploitation occurs when a maliciously crafted event log file is opened. As a result, a remote attacker...

PT-2015-1153

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue arises from incorrect handling of a log file, allowing exploitation when an attacker-formed event log file is opened. This enables a remote attacker to execute arbitrary code in the...

PT-2015-1151

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue arises from incorrect handling of a log file in the Windows operating system. Exploitation occurs when a maliciously crafted event log file is opened. As a result, a remote attacker...

PT-2015-1152

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue arises from incorrect handling of a log file in the Windows operating system. Exploitation occurs when a maliciously crafted event log file is opened. As a result, a remote attacker...

Manage Engine Event Log Analyzer 10 Build 10003 Cross Site Scripting

======================================================================== ======= Reflected XSS Vulnerability In Manage Engine Event Log Analyzer ======================================================================== ======= . contents:: Table Of Content Overview ======== Title : Reflected XSS...

Government Report Critical of FAA Security Controls

The Federal Aviation Administration has been put on notice that its information security controls are not up to par and that a risk-based program must be implemented from the ground up in order to assure the safety of its networks and passengers in the sky. A scathing Government Accounting Office...