14379 matches found
2022-10 Cumulative Update for Windows 10 Version 1507 for x86-based Systems (KB5018425)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2022-10 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5018411)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2022-10 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5018419)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
August 9, 2022—KB5016616 (OS Builds 19042.1889, 19043.1889, and 19044.1889)
None None...
October 11, 2022—KB5018410 (OS Builds 19042.2130, 19043.2130, and 19044.2130) - EXPIRED
None None...
October 11, 2022—KB5018411 (OS Build 14393.5427) - EXPIRED
None None...
KB5018410: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (October 2022)
The remote Windows host is missing security update 5018410. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
KB5018419: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2022)
The remote Windows host is missing security update 5018419. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
Microsoft Windows Point-to-Point Tunneling Protocol 安全漏洞
Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft that enables the secure transmission of data from remote clients to private corporate servers by creating a virtual private network VPN over a TCP/IP-based data network. VPN. A security vulnerability...
KB5018415: Windows 10 version 17784 / Azure Stack HCI Security Update (October 2022)
The remote Windows host is missing security update 5018415. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is copyright C...
KB5018425: Windows 10 LTS 1507 Security Update (October 2022)
The remote Windows host is missing security update 5018425. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
KB5018411: Windows 10 Version 1607 and Windows Server 2016 Security Update (October 2022)
The remote Windows host is missing security update 5018411. It is, therefore, affected by multiple vulnerabilities - Server Service Remote Protocol Elevation of Privilege Vulnerability CVE-2022-38045 - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE D...
EulerOS Virtualization 3.0.6.0 : kernel (EulerOS-SA-2022-2566)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require th...
Korean keyboard (101 key) Type 2 & 3 cannot be synced using “Sync only once” mode.
For Windows 10/11 as VDA, CWA Windows client machine uses Microsoft Korean IME with the Korean keyboard 101 key Type 2, or Type 3. The Citrix Workspace keyboard sync mode is configured as “Sync only once” in the Keyboard and Language Bar setting. Starting the Windows 10/11 Desktop/APP session, th...
Nextcloud: XSS in Desktop Client in call notification popup
Summary: The Nextcloud Desktop Client application does not properly neutralize the name of a group conversation before using it. Steps To Reproduce: Server Machine: 1. Install the Nextcloud Server application 2. Create an administrator account 3. Create a user account Client Machine: 4. Install t...
Unified Remote Authentication Bypass / Code Execution Exploit
This Metasploit module utilizes the Unified Remote remote control protocol to type out and deploy a payload. The remote control protocol can be configured to have no passwords, a group password, or individual user accounts. If the web page is accessible, the access control is set to no password f...
Nextcloud: XSS in Desktop Client via user status and information
Summary: The Nextcloud Desktop Client application does not properly neutralize the Full Name and Status Message of users before using them. Steps To Reproduce: Server Machine: 1. Install the Nextcloud Server application 2. Log into your account 3. Navigate to your profile page 4. Set the Full Nam...
Unified Remote Authentication Bypass / Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Unified Remote Auth Bypass to RCE', 'Description' = %q This module utilizes the Unified Remote remote control protocol to type out and deploy a...
WiFiMouse 1.8.3.4 - Remote Code Execution (RCE)
Exploit Title: WiFiMouse 1.8.3.4 - Remote Code Execution RCE Date: 15-08-2022 Author: Febin Vendor Homepage: http://necta.us/ Software Link: http://wifimouse.necta.us/download Version: 1.8.3.4 Tested on: Windows 10 !/bin/bash printf " WiFiMouse / MouseServer 1.8.3.4 Exploit by FEBIN " printf "...
WiFiMouse 1.8.3.4 Remote Code Execution
Exploit Title: WiFiMouse 1.8.3.4 - Remote Code Execution RCE Date: 15-08-2022 Author: Febin Vendor Homepage: http://necta.us/ Software Link: http://wifimouse.necta.us/download Version: 1.8.3.4 Tested on: Windows 10 !/bin/bash printf " WiFiMouse / MouseServer 1.8.3.4 Exploit by FEBIN " printf "...