metasploit-framework

This is an offensive tool for Metasploit Framework. It is a collection of modules and tools for exploiting vulnerabilities in various systems and applications. The repository contains a wide range of modules, including exploits, payloads, and post-exploitation tools. The primary target of this to...

PowerSploit

This is a PowerShell post-exploitation framework called PowerSploit. It is a collection of PowerShell scripts that can be used to perform various malicious activities, such as code execution, DLL injection, and reflective PE injection. The framework is designed to be portable and can be used on...

PT-2020-13522

Name of the Vulnerable Software and Affected Versions Microweber versions prior to 1.1.20 Description The issue allows an unauthenticated user to disclose the users database via a "/modules/ POST" request. This is possible due to a flaw in the userfiles/modules/users/controller/controller.php fil...

Windows Modules Installer Elevation of Privilege Vulnerability (KB4565552)

This host is missing an important security update according to Microsoft KB4565552 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Windows Modules Installer Elevation of Privilege Vulnerability (KB4565912)

This host is missing an important security update according to Microsoft KB4565912 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

The vulnerabilities of Splunk and Sumologic modules in the configuration management system Ansible, which allow a hacker to gain unauthorized access to protected information.

The vulnerability of Splunk and Sumologic modules in the Ansible configuration management system is related to the absence of the “nolog” flag. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2020-1346

An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation of Privilege Vulnerability'...

CVE-2020-1346

An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation of Privilege Vulnerability'...

CVE-2020-1346

An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation of Privilege Vulnerability'...

CVE-2020-1346

Technical details about CVE-2020-1346 are not publicly provided in the connected documents. Monitor for updates from official advisories and third-party analyses.

CVE-2020-15721

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

CVE-2020-15721

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

Servicing stack update for Windows 10, version 1809: July 14, 2020

None None...

Servicing stack update for Windows 10, version 2004: July 14, 2004

None None...

Servicing stack update for Windows Server 2008 SP2: July 14, 2020

Servicing stack update for Windows Server 2008 SP2: July 14, 2020 Applies to Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 Server Core installation Windows Server 2008 for Itanium-Based Systems Service Pack 2 Windows Server 2008 for...

PT-2020-3159

Name of the Vulnerable Software and Affected Versions Windows Modules Installer affected versions not specified Description The issue is related to an elevation of privilege vulnerability. It occurs when the Windows Modules Installer improperly handles file operations. This vulnerability can be...

CVE-2020-15721: Improper Neutralization of Input During Web Page Generation

RosarioSIS through 6.8-beta allows modules/Custom/NotifyParents.php XSS because of the href attributes for AddStudents.php and User.php...

CVE-2020-1346: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules Installer Elevation of Privilege Vulnerability'...

KB4565529: Windows Server 2008 July 2020 Security Update

The remote Windows host is missing security update 4565529 or cumulative update 4565536. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this...