EUVD-2023-40388

Malicious code in bioql PyPI...

EUVD-2023-40367

Malicious code in bioql PyPI...

Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers

Details have emerged about a now-patched security flaw in Styra's Open Policy Agent OPA that, if successfully exploited, could have led to leakage of New Technology LAN Manager NTLM hashes. "The vulnerability could have allowed an attacker to leak the NTLM credentials of the OPA server's local us...

CVE-2024-43532

Remote Registry Service Elevation of Privilege Vulnerability...

CVE-2024-43532

Remote Registry Service Elevation of Privilege Vulnerability...

CVE-2024-43532

CVE-2024-43532 is a Remote Registry Service Elevation of Privilege vulnerability with a documented exploit path in a private GitHub post, alleging interception of NTLM data via RPC_A uthon level CONNECT and a Machine‑in‑the‑Middle attack against advapi32.dll behavior. Affected: Windows 10/11 and ...

CVE-2024-43532 Remote Registry Service Elevation of Privilege Vulnerability

...

Microsoft Windows Remote Registry Service 安全漏洞

Microsoft Windows Remote Registry Service is an RPC-based client/server protocol from Microsoft Corporation USA for remotely managing hierarchical data repositories like the Windows Registry . A security vulnerability exists in Microsoft Windows Remote Registry Service. An attacker could exploit...

The vulnerability of the Remote Registry Service (regsvc) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Registry Service regsvc in Microsoft Windows operating systems with integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Remote Registry Service (regsvc) in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Registry Service regsvc in Microsoft Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-36423

Microsoft Remote Registry Service Remote Code Execution Vulnerability...

CVE-2023-36401

Microsoft Remote Registry Service Remote Code Execution Vulnerability...

CVE-2023-36401

Microsoft Remote Registry Service Remote Code Execution Vulnerability...

CVE-2023-36401 Microsoft Remote Registry Service Remote Code Execution Vulnerability

...

CVE-2023-36401

Technical details (affected product, root cause, impact, or patch) are not provided in the connected documents. Please monitor for updates from Microsoft or CVE references to get concrete details and remediation when they become available.

CVE-2023-36423

Technical details about CVE-2023-36423 are not provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates in connected sources.

Microsoft Remote Registry Service Remote Code Execution Vulnerability

...

Microsoft Remote Registry Service Remote Code Execution Vulnerability

...

PT-2023-7065 · Microsoft · Remote Registry Service +1

Name of the Vulnerable Software and Affected Versions: Microsoft Remote Registry Service affected versions not specified Description: The issue is related to an integer overflow in the Microsoft Remote Registry Service. It allows remote attackers to execute arbitrary code on the system...

Windows Secrets Dump

Dumps SAM hashes and LSA secrets including cached creds from the remote Windows target without executing any agent locally. This is done by remotely updating the registry key security descriptor, taking advantage of the WriteDACL privileges held by local administrators to set temporary read...