113 matches found
Last Week’s Security news: PrintNightmare, Kaseya, Intune, Metasploit Docker escape
Hello guys! The second episode of Last Week’s Security news from June 28 to July 4. The most interesting vulnerability of the last week is of course Microsoft Print Spooler "PrintNightmare". By sending an RpcAddPrinterDriverEx RPC request, for example over SMB, a remote, authenticated attacker ma...
Exploit for CVE-2021-1675
CVE-2021-1675 / CVE-2021-34527 Impacket implementation of the...
A week in security (June 28 – July 4)
Last week on Malwarebytes Labs: Is it Game Over for VR Advergaming? Lil’ skimmer, the Magecart impersonator What is the WireGuard VPN protocol? Binance receives the ban hammer from UK’s FCA Fired by algorithm: The future’s here and it’s a robot wearing a white collar Second colossal Linkedin...
Do Not Stare Into the Crypto Orb
A PrintNightmare exploit, a VPN takedown, and more of the week's top security news...
Remote code execution
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or...
Episode 124: PrintNightmare 0Day Exploit Accidentally Leaked Online
Security researchers accidentally leaked zero-day exploit code for a new Windows bug, now called PrintNightmare, while easily exploitable vulnerabilities in the ProfilePress plugin, previously called WP User Avatar, were patched quickly. An unprotected cloud database containing over 814 million...
Exploit for CVE-2021-1675
CVE-2021-1675 - PrintNightmare DSC Mitigation PowerShell...
Exploit for CVE-2021-1675
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewa...
CISA Offers New Mitigation for PrintNightmare Bug
The U.S. government has stepped in to offer a mitigation for a critical remote code execution RCE vulnerability in the Windows Print Spooler service that may not have been fully patched by Microsoft’s initial effort to fix it. To mitigate the bug, dubbed PrintNightmare, the CERT Coordination Cent...
Exploit for CVE-2021-34527
CVE-2021-34527 - PrintNightmare LPE PowerShell Caleb Stew...
Exploit for CVE-2021-1675
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewa...
Microsoft Warns of Critical "PrintNightmare" Flaw Being Exploited in the Wild
Microsoft on Thursday officially confirmed that the "PrintNightmare" remote code execution RCE vulnerability affecting Windows Print Spooler is different from the issue the company addressed as part of its Patch Tuesday update released earlier this month, while warning that it has detected...
Exploit for CVE-2021-1675
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewa...
PrintNightmare 0-day can be used to take over Windows domain controllers
In a rush to be the first to publish a proof-of-concept PoC, researchers have published a write-up and a demo exploit to demonstrate a vulnerability that has been dubbed PrintNightmare. Only to find out they had alerted the world to a new 0-day vulnerability by accident. What happened? In June,...
Exploit for CVE-2021-1675
PrintNightmareScanner Scanner to detect Windows Print Spooler...
Exploit for CVE-2021-1675
CVE-2021-1675 Impacket implementation of the PrintNightmare...
Exploit for CVE-2021-1675
Local Privilege Escalation Edition of CVE-2021-1675/CVE-2021-3...
Windows Print Spooler Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or...
