Windows SMB Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...

Microsoft Windows Graphics Component CVE-2017-0060 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Live Meeting 2007 Add-in Microsoft Live Meeting 2007 Console Microsoft Lync...

Windows SMBv3 remote denial of service 0day vulnerabilities-vulnerability warning-the black bar safety net

GMT + 2 on 2 September, the foreign technology website Github exposure Windows SMBv3 the presence of remote attacks 0day vulnerability. According to the disclosure of the vulnerability the authentication code, The POC, the attacker can force the affected system to blue screen crash, this...

MS16-114: Security Update for Windows SMBv1 Server (3185879)

The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the Microsoft Server Message Block 1.0 SMBv1 Server due to improper handling of certain requests. An authenticated, remote attacker can exploit this, via specially crafted...

Microsoft Windows Kernel Mode Driver CVE-2015-1678 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information such as kernel memory contents. This may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP...

Microsoft Exchange - IIS HTTP Internal IP Address Disclosure (Metasploit)

Exploit Title: Microsoft Exchange IIS HTTP Internal IP Disclosure Vulnerability Google Dork: NA Date: 08/01/2014 Exploit Author: Nate Power Vendor Homepage: microsoft.com Software Link: NA Version: Exchange OWA 2003, Exchange CAS 2007/2010/2013 Tested on: Exchange OWA 2003, Exchange CAS...

July 2014 Microsoft Patch Tuesday Security Bulletins Updates

Tomorrow’s regularly scheduled patch update from Microsoft includes – go figure – another cumulative rollup for Internet Explorer and a critical fix for a Windows remote code execution bug. More of the same for sure, but there’s another bug being patched that may merit moving up a rung on your li...

Microsoft Server Service Relative Path Stack Corruption

No description provided by source. $Id: ms08067netapi.rb 11614 2011-01-21 04:09:48Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

UBUNTU-CVE-2013-4313

Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not prevent use of '\0' characters in query strings, which might allow remote attackers to conduct SQL injection attacks against Microsoft SQL Server via a crafted string...

CVE-2013-3182

The Windows NAT Driver aka winnat service in Microsoft Windows Server 2012 does not properly validate memory addresses during the processing of ICMP packets, which allows remote attackers to cause a denial of service memory corruption and system hang via crafted packets, aka "Windows NAT Denial o...

MS08-067 Microsoft Server Service Relative Path Stack Corruption

This module exploits a parsing flaw in the path canonicalization code of NetAPI32.dll through the Server Service. This module is capable of bypassing NX on some operating systems and service packs. The correct target must be used to prevent the Server Service along with a dozen others in the same...

Microsoft Windows TCP/IP本地权限提升漏洞(MS12-032)

BUGTRAQ ID: 53349 CVE ID: CVE-2012-0179 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在影响TCP/IP栈组件'tcpip.sys'的本地权限提升漏洞，攻击者可利用此漏洞通过在另一个进程中执行任意代码获取提升的权限，可能会造成拒绝服务。 0 Microsoft Server 2008 Windows Server 2008 R2 x64 SP1 Microsoft Server 2008 Windows Server 2008 R2 x64 0 Microsoft Server 2008...

Microsoft Windows DNS Server远程拒绝服务漏洞(MS12-017)

BUGTRAQ ID: 52374 CVE ID: CVE-2012-0006 Windows DNS Server是微软公司推出的域名系统或者域名服务，域名系统为Internet上的主机分配域名地址和IP地址。 Windows DNS Server在处理某些lookup查询时，在实现上存在远程拒绝服务漏洞，远程攻击者可利用此漏洞造成DNS服务器停止响应，拒绝服务合法用户。 0 Microsoft Server 2008 Microsoft Server 2003 厂商补丁： Microsoft ---------...

Microsoft Windows TrueType字体解析拒绝服务漏洞(MS11-084)

CVE ID: CVE-2011-2004 Microsoft Windows是流行的计算机操作系统。 Microsoft Windows在实现上存在安全漏洞，可被恶意用户利用造成拒绝服务。 此漏洞源于在解析TrueType字体文件时Win32k.sys中存在的数组索引错误，可通过诱使用户浏览包含特制TrueType字体文件的WebDAV或网络共享利用此漏洞。 Microsoft Windows Server 2008 Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（ms11-084）以及相应补丁:...

Microsoft Windows Kernel Win32k.sys本地权限提升漏洞(MS11-077)(CVE-2011-2011)

BUGTRAQ ID: 49981 CVE ID: CVE-2011-2011 Microsoft Windows是流行的计算机操作系统。 Windows Kernel在Win32k.sys的实现上存在本地权限提升漏洞，本地攻击者可利用此漏洞以内核权限执行任意代码，导致完全控制受影响计算机。 Microsoft Windows XP Microsoft Windows Server Microsoft Vista Microsoft Windows 7 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS11-077）以及相应补丁:...

Microsoft SMB Crafted Write Request Denial of Service (MS11-048; CVE-2011-1267)

SMB Protocol is the file sharing protocol used by default on Windows-based computers. A denial of service vulnerability exists in the way that Microsoft Server Message Block SMB Protocol software handles specially crafted SMB requests. The vulnerability is caused when the Microsoft Server Message...

Microsoft Windows Server - Service Relative Path Stack Corruption (MS08-067) (Metasploit)

$Id: ms08067netapi.rb 11614 2011-01-21 04:09:48Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Microsoft Windows用户访问控制(UAC)绕过本地权限提升漏洞

BUGTRAQ ID: 45045 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows实现上存在漏洞，本地攻击攻击者可以利用此漏洞以系统级权限执行任意代码，成功利用漏洞将完全操纵受影响的计算机，利用失败后可能形成拒绝服务。 Microsoft Vista x64 Edition SP2 Microsoft Vista x64 Edition SP1 Microsoft Vista x64 Edition 0 Microsoft Vista Ultimate SP2 Microsoft Vista Ultimate SP1 Microso...

Microsoft Windows TCP/IP时间戳远程代码执行漏洞（MS09-048）

BUGTRAQ ID: 36265 CVECAN ID: CVE-2009-1925 Microsoft Windows是微软发布的非常流行的操作系统。 由于TCP/IP栈没有正确地清除状态信息，导致Windows TCP/IP栈中存在远程代码执行漏洞。这会导致TCP/IP栈引用包含有其他信息的字段为函数指针。匿名攻击者可以通过向在网络上监听服务的计算机发送特制的TCP/IP报文来利用这个漏洞，成功利用这个漏洞的攻击者可以完全控制受影响的系统；攻击者之后可以安装程序、查看、更改或删除数据，或创建拥有完全用户权限的新账号。 Microsoft Windows Vista SP2...

Input validation

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Pointe...