169 matches found
CVE-2016-7220
Virtual Secure Mode in Microsoft Windows 10 allows local users to obtain sensitive information via a crafted application, aka "Virtual Secure Mode Information Disclosure Vulnerability."...
Microsoft Windows Virtual Secure Mode Local Information Leakage Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information leakage vulnerability exists in Microsoft Windows Virtual Secure Mode. An attacker could exploit the vulnerability to obtain sensitive information...
Virtual Secure Mode Information Disclosure Vulnerability
An information disclosure vulnerability exists when Windows Virtual Secure Mode improperly handles objects in memory. A locally authenticated attacker who successfully exploited this vulnerability could be able to read sensitive information on the target system. To exploit the vulnerability, an...
Microsoft Windows Virtual Secure Mode CVE-2016-7220 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems...
The vulnerability of the Windows operating system allows a perpetrator to bypass the protection mechanisms of Virtual Secure Mode Hypervisor Code Integrity.
The vulnerability of the Windows operating system is related to errors in security settings. Exploiting this vulnerability allows a malicious actor to bypass the Virtual Secure Mode Hypervisor Code Integrity protection mechanism and execute RWX page marking using a specially created application...
CVE-2016-0181
Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode Hypervisor Code Integrity HVCI protection mechanism and perform RWX markings of kernel-mode pages via a crafted application, aka "Hypervisor Code Integrity Security Feature Bypass."...
Microsoft Windows Virtual Secure Mode Security Feature Bypass vulnerability (3155451)
This host is missing an important security update according to Microsoft Bulletin MS16-066. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Cumulative Update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: May 10, 2016
None None...
Cumulative Update for Windows 10: May 10, 2016
None None...
MS16-066: Security Update for Virtual Secure Mode (3155451)
The remote Windows host is missing a security update. It is, therefore, affected by a security feature bypass vulnerability due to certain kernel-mode pages being marked as RWX Read, Write, Execute even when Hypervisor Code Integrity HVCI is enabled. An attacker can exploit this vulnerability, vi...
Debian DLA-452-1 : smarty3 security update
Smarty3, a template engine for PHP, allowed remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by 'literal' in a template. For Debian 7 'Wheezy', these problems have been fixed in version 3.1.10-2+deb7u1. We recommend that you upgrade your smart...
DLA-452-1 smarty3 - security update
Bulletin has no description...
SOL16124 - OpenSSL vulnerability CVE-2015-0206
The SOD process is only vulnerable if the failover.secure db variable is enabled; the db variable is disabled by default. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed...
SOL16123 - OpenSSL vulnerability CVE-2014-3571
The SOD process is only vulnerable if the failover.secure database variable is enabled; the database variable is disabled by default. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to th...
Updated php-smarty packages fix security vulnerability
Smarty before 3.1.21 allows remote attackers to bypass the secure mode restrictions and execute arbitrary PHP code as demonstrated by "literal" in a template CVE-2014-8350...
.NET Remoting Services Remote Command Execution Vulnerability
Exploit for windows platform in category remote exploits Source: https://github.com/tyranid/ExploitRemotingService Exploit Database Mirror: http://www.exploit-db.com/sploits/35280.zip ExploitRemotingService c 2014 James Forshaw ============================================= A tool to exploit .NET...
.NET Remoting Services - Remote Command Execution
.NET Remoting Services - Remote Command Execution Source: https://github.com/tyranid/ExploitRemotingService Exploit Database Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/35280.zip ExploitRemotingService c 2014 James Forshaw...
.NET Remoting Services - Remote Command Execution
Source: https://github.com/tyranid/ExploitRemotingService Exploit Database Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/35280.zip ExploitRemotingService c 2014 James Forshaw ============================================= A tool to exploit .NET Remoting...
