CVE-2016-0040: Undefined Security Weakness

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."...

Microsoft Windows Remote Desktop Elevation of Privilege Vulnerability (3134700)

This host is missing an important security update according to Microsoft Bulletin MS16-017. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Windows Multiple Vulnerabilities (3134228)

This host is missing an important security update according to Microsoft Bulletin MS16-014. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2016-1229

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold and 1511 Description The issue...

PT-2016-1231

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1 Windows Server versions 2012 R2 Windows RT versions 8.1 Description The issue is related to insufficient input validation in the Sync Framework component, allowing remote attackers to cause a denial of service by...

MS16-020: Security Update for Active Directory Federation Services to Address Denial of Service (3134222)

The remote Windows host is missing a security update. It is, therefore, affected by a denial of service vulnerability in Active Directory Federation Services ADFS due to a failure to properly process certain input during forms-based authentication. A remote attacker can exploit this, via crafted...

PT-2016-1172

Name of the Vulnerable Software and Affected Versions Windows Reader versions in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Description The issue is related to insufficient data validation in the Windows Reader component, allowing remote attackers to execute arbitrary...

MS16-020: Security update for Active Directory Federation Services to address denial of service: February 9, 2016

None None...

MS16-014: Description of the security update for Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8.1, and Windows Server 2012 R2: February 9, 2016

None None...

Microsoft Active Directory Federation Services CVE-2016-0037 Denial of Service Vulnerability

Description Microsoft Active Directory Federation Services is prone to a denial of service vulnerability. Successful exploits may allow the attacker to cause the server to become non-responsive, resulting in denial of service conditions. Technologies Affected Microsoft Active Directory Federation...

Microsoft Root Certificate Program SHA-1 Deprecation Advisory (3123479)

This host is missing an important security update according to Microsoft advisory 3123479. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2016-0018

Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."...

CVE-2016-0016

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL...

CVE-2016-0009

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 10 Gold and 1511 allow remote attackers to execute arbitrary code via unspecified vectors, aka "Win32k Remote Code Execution Vulnerability."...

Remote code execution

Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vulnerability."...

CVE-2016-0020

CVE-2016-0020 is a local privilege-elevation flaw in Microsoft Windows where DLL loading mishandling allows a crafted application to gain privileges on affected systems. Public documentation (MS16-007) indicates multiple Windows versions are affected, including Windows Vista SP2, Windows Server 2...

CVE-2016-0020: Undefined Security Weakness

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "MAPI DLL Loading Elevation of Privilege Vulnerability."...

V5shop 在cart.aspx处的参数spikeid存在SQL注入漏洞

举例： 通过谷歌搜索inurl:productpic.aspx,因为cart.aspx是需要登录才可以正常访问，但是注入的时候毫无影响。 案例： http://www.wolifu.com/cart.aspx?act=spikebuy&spikeid=3 D:\sqlmappython sqlmap.py -u "http://www.wolifu.com/cart.aspx?act=spikebuy&spik eid=3" -p "spikeid" | | 1.0-dev-nongit-20150806 | -| . | | | .'| . | || |||||,| | || ||...

MS16-005: Security update for Windows kernel-mode drivers to address remote code execution: January 12, 2016

Resolves vulnerabilities in Windows that could allow remote code execution if a user visits a malicious website.SummaryTo learn more about the vulnerability, see Microsoft Security Bulletin MS16-005. More InformationImportant All future security and non-security updates for Windows RT 8.1, Window...

KLA10728 Obsolete Adobe Flash Player for Windows

Obsolete version of Adobe Flash Player was found in Microsoft Internet Explorer. By exploiting this vulnerability malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely. Technical details For further information look at KLA10727 Origina...