265 matches found
June 13, 2023—KB5027225 (OS Build 20348.1787)
None None...
May 9, 2023—KB5026362 (OS Build 17763.4377) - EXPIRED
None None...
April 25, 2023—KB5025298 (OS Build 22000.1880) Preview
None None...
April 25, 2023—KB5025305 (OS Build 22621.1635) Preview
None None...
PT-2023-2465 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows CNG Key Isolation Service. This vulnerability is caused by synchronization errors when using a share...
March 14, 2023—KB5023697 (OS Build 14393.5786) - EXPIRED
None None...
March 14, 2023—KB5023752 (Security-only update)
None None...
March 14, 2023—KB5023702 (OS Build 17763.4131)- EXPIRED
None None...
March 14, 2023—KB5023713 (OS Build 10240.19805) - EXPIRED
None None...
February 14, 2023—KB5022838 (OS Build 14393.5717) - EXPIRED
None None...
DragonCastle - A PoC That Combines AutodialDLL Lateral Movement Technique And SSP To Scrape NTLM Hashes From LSASS Process
A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process. Description Upload a DLL to the target machine. Then it enables remote registry to modify AutodialDLL entry and start/restart BITS service. Svchosts would load our DLL, set again AutodiaDL...
Iranian Hackers Compromised a U.S. Federal Agency's Network Using Log4Shell Exploit
Iranian government-sponsored threat actors have been blamed for compromising a U.S. federal agency by taking advantage of the Log4Shell vulnerability in an unpatched VMware Horizon server. The details, which were shared by the U.S. Cybersecurity and Infrastructure Security Agency CISA, come in...
Microsoft Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone or...
CVE-2022-37977
Local Security Authority Subsystem Service LSASS Denial of Service Vulnerability...
Denial of service
Local Security Authority Subsystem Service LSASS Denial of Service Vulnerability...
August 9, 2022—KB5016622 (OS Build 14393.5291) - EXPIRED
None None...
August 9, 2022—KB5016686 (Security-only update)
None None...
August 9, 2022—KB5016627 (OS Build 20348.887)
None None...