Lucene search
K

252 matches found

Cvelist
Cvelist
added 2022/12/13 12:0 a.m.25 views

CVE-2022-44698 Windows SmartScreen Security Feature Bypass Vulnerability

...

5.4CVSS6.9AI score0.67219EPSS
Exploits0References1
NCSC
NCSC
added 2022/12/13 12:0 a.m.2 views

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in several components of Windows. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Administrator/Root rights Remote co...

8.5CVSS7.7AI score0.67219EPSS
Exploits6
ATTACKERKB
ATTACKERKB
added 2022/12/13 12:0 a.m.42 views

CVE-2022-44698

Windows SmartScreen Security Feature Bypass Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

5.4CVSS2.8AI score0.67219EPSS
In wildExploits0References4
CISA KEV Catalog
CISA KEV Catalog
added 2022/12/13 12:0 a.m.53 views

Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web MOTW defenses via a specially crafted malicious file...

5.4CVSS3AI score0.67219EPSS
In wildExploits0
The Hacker News
The Hacker News
added 2022/10/31 12:0 p.m.79 views

Unofficial Patch Released for New Actively Exploited Windows MotW Vulnerability

An unofficial patch has been made available for an actively exploited security flaw in Microsoft Windows that makes it possible for files signed with malformed signatures to sneak past Mark-of-the-Web MotW protections. The fix, released by 0patch, arrives weeks after HP Wolf Security disclosed a...

7.1AI score
Exploits0
Malwarebytes
Malwarebytes
added 2022/10/26 2:0 p.m.21 views

Malformed signature trick can bypass Mark of the Web

Mark of the Web MOTW--the technology that ensures Windows pops a warning message when trying to open a file downloaded from the Internet--is back in the news, but unfortunately not in a good way. Bleeping Computer reports that a recently uncovered but somewhat old bug has been unearthed which hel...

0.2AI score
Exploits0
Malwarebytes
Malwarebytes
added 2022/09/26 1:0 p.m.42 views

Windows 11 pulls ahead of Windows 10 in anti-phishing stakes

Some new security additions and changes have been announced for users of Windows, but youll have to be using Windows 11 to get the most out of them. Windows 10 users may find that this is going to be a case of falling behind the herd ever so slightly. Anti-phishing tools Enhanced phishing...

0.3AI score
Exploits0
Microsoft Malware Protection
Microsoft Malware Protection
added 2022/08/15 4:0 p.m.18 views

Disrupting SEABORGIUM’s ongoing phishing operations

The Microsoft Threat Intelligence Center MSTIC has observed and taken actions to disrupt campaigns launched by SEABORGIUM, an actor Microsoft has tracked since 2017. SEABORGIUM is a threat actor that originates from Russia, with objectives and victimology that align closely with Russian state...

0.3AI score
Exploits0
The Hacker News
The Hacker News
added 2022/06/24 5:24 a.m.44 views

New 'Quantum' Builder Lets Attackers Easily Create Malicious Windows Shortcuts

A new malware tool that enables cybercriminal actors to build malicious Windows shortcut .LNK files has been spotted for sale on cybercrime forums. Dubbed Quantum Lnk Builder, the software makes it possible to spoof any extension and choose from over 300 icons, not to mention support UAC and...

7.1AI score
Exploits0
Microsoft Secure
Microsoft Secure
added 2022/04/13 4:0 p.m.68 views

Dismantling ZLoader: How malicious ads led to disabled security tools and ransomware

As announced today, Microsoft took action against the ZLoader trojan by working with telecommunications providers around the world to disrupt key ZLoader infrastructure. We used our research into this threat to enrich our protection technologies and ensure this infrastructure could no longer be...

9.3CVSS0.8901EPSS
Exploits2
Microsoft Malware Protection
Microsoft Malware Protection
added 2022/04/13 4:0 p.m.60 views

Dismantling ZLoader: How malicious ads led to disabled security tools and ransomware

As announced today, Microsoft took action against the ZLoader trojan by working with telecommunications providers around the world to disrupt key ZLoader infrastructure. We used our research into this threat to enrich our protection technologies and ensure this infrastructure could no longer be...

9.3CVSS0.8901EPSS
Exploits2
Kitploit
Kitploit
added 2021/04/15 9:30 p.m.440 views

Defeat-Defender - Powerful Batch Script To Dismantle Complete Windows Defender Protection And Even Bypass Tamper Protection

Powerfull Batch File To Disable Windows Defender,Firewall,Smartscreen And Execute the payload Usage : 1. Edit Defeat-Defender.bat on this line https://github.com/swagkarna/Defeat-Defender/blob/93823acffa270fa707970c0e0121190dbc3eae89/Defeat-Defender.batL72 and replace the direct url of your paylo...

7.2AI score
Exploits0References2
Kitploit
Kitploit
added 2020/06/27 1:0 p.m.54 views

Screenspy - Capture user screenshots using shortcut file (Bypass SmartScreen/Defender)

Capture user screenshots using shortcut file Bypass SmartScreen/Defender. Suport Multi-monitor Legal disclaimer: Usage of ScreenSpy for attacking targets without prior mutual consent is illegal. It's the end user's responsibility to obey all applicable local, state and federal laws. Developers...

7.3AI score
Exploits0References1
Malwarebytes
Malwarebytes
added 2020/03/24 5:37 p.m.36 views

Windows 7 is EOL: What next?

End-of-life EOL is an expression commonly used by software vendors to indicate that a product or version of a product has reached the end of usefulness in the eyes of the vendor. Many companies, including Microsoft, announce the EOL dates for their products far in advance. Every Windows product h...

Exploits0
OpenVAS
OpenVAS
added 2019/12/09 12:0 a.m.15 views

SYS.2.2.2.A9

Ziel des Bausteins SYS.2.2.2 ist der Schutz von Informationen, die durch und auf Windows 8.1-Clients verarbeiten werden. Die Standard-Anforderung Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify...

7.3AI score
Exploits0References1
OpenVAS
OpenVAS
added 2019/11/18 12:0 a.m.20 views

SYS.2.2.3.A13

Ziel des Bausteins SYS.2.2.3 ist der Schutz von Informationen, die durch und auf Windows 10-Clients verarbeiten werden. Die Standard-Anforderung SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2018/08/21 12:0 a.m.25 views

Mozilla Firefox ESR < 52.8 Multiple Vulnerabilities

Binary data 700337.prm...

9.8CVSS7.3AI score0.43031EPSS
Exploits4References11
OpenVAS
OpenVAS
added 2018/06/27 12:0 a.m.18 views

Microsoft Windows 10: Windows Defender SmartScreen (Edge)

This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on. If you enable...

7.2AI score
Exploits0References4
OpenVAS
OpenVAS
added 2018/06/27 12:0 a.m.10 views

Microsoft Windows 10: Windows Defender SmartScreen prompts for sites (Edge)

This policy setting lets you decide whether employees can override the Windows Defender SmartScreen warnings about potentially malicious websites. If you enable this setting, employees can SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced source...

7.2AI score
Exploits0References4
OpenVAS
OpenVAS
added 2018/06/27 12:0 a.m.34 views

Microsoft Windows: Windows Defender SmartScreen (Explorer)

This policy allows you to turn Windows Defender SmartScreen on or off. SmartScreen helps protect PCs by warning users before running potentially malicious programs downloaded from the Internet. This warning is presented as an interstitial dialog shown before running an app that has been downloade...

6.9AI score
Exploits0References8
Rows per page
Query Builder