KB5012653: Windows 10 version 1507 LTS Security Update (April 2022)

The remote Windows host is missing security update 5012653. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-26798, CVE-2022-26801, CVE-2022-26786, CVE-2022-24549, CVE-2022-26794,...

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

Microsoft Windows SMB Server输入验证错误漏洞

Microsoft Windows SMB Server is a network file-sharing protocol from Microsoft. It allows applications on a computer to read and write files and request services from server programs on a computer network. An input validation error vulnerability exists in Microsoft Windows SMB Server. The followi...

KB5012591: Windows 10 version 1909 / Windows Server 1909 Security Update (April 2022)

The remote Windows host is missing security update 5012591. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-24474, CVE-2022-24479, CVE-2022-24481, CVE-2022-24486, CVE-2022-24494,...

KB5012596: Windows 10 version 1607 / Windows Server 2016 Security Update (April 2022)

The remote Windows host is missing security update 5012591. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-26827, CVE-2022-24549, CVE-2022-26810, CVE-2022-26803, CVE-2022-26808,...

Microsoft Windows Network File System代码注入漏洞

Microsoft Windows Network File System is a file sharing solution from Microsoft that allows you to transfer files between computers running Windows Server and UNIX operating systems using the NFS protocol. A code injection vulnerability exists in Microsoft Windows Network File System. The followi...

Microsoft Bluetooth Driver竞争条件问题漏洞

Microsoft Bluetooth Driver is an application software Bluetooth driver from Microsoft Corporation USA. Microsoft Bluetooth Driver is vulnerable to a competitive condition issue. The following products and versions are affected: Windows 10 Version 1909 for 32-bit Systems,Windows 10 Version 1909 fo...

Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

KB5012599: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (April 2022)

The remote Windows host is missing security update 5012591. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-26789, CVE-2022-26786, CVE-2022-26802, CVE-2022-26803, CVE-2022-26801,...

KB5012647: Windows 10 version 1809 / Windows Server 2019 Security Update (April 2022)

The remote Windows host is missing security update 5012591. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-26790, CVE-2022-26828, CVE-2022-26827, CVE-2022-26807, CVE-2022-26796,...

MiniTool Partition Wizard 12.0 Unquoted Service Path

Exploit Title: MiniTool Partition Wizard - Unquoted Service Path Date: 08/04/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.minitool.com/ Software Link: https://www.minitool.com/download-center/ Version: 12.0 Tested: Windows 10 PoC : C:\Users\saudhsc qc MTSchedulerService SC...

MiniTool Partition Wizard - Unquoted Service Path Vulnerability

Exploit Title: MiniTool Partition Wizard - Unquoted Service Path Exploit Author: Saud Alenazi Vendor Homepage: https://www.minitool.com/ Software Link: https://www.minitool.com/download-center/ Version: 12.0 Tested: Windows 10 Pro x64 es PoC : C:\Users\saudhsc qc MTSchedulerService SC...

MiniTool Partition Wizard - Unquoted Service Path

Exploit Title: MiniTool Partition Wizard - Unquoted Service Path Date: 07/04/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.minitool.com/ Software Link: https://www.minitool.com/download-center/ Version: 12.0 Tested: Windows 10 Pro x64 es PoC : C:\Users\saudhsc qc MTSchedulerServi...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CNVD-2022-60118)

Microsoft Edge is a web browser that comes with versions of Windows 10 and later, and an elevation of privilege vulnerability exists in Microsoft Edge Chromium-based. An attacker could exploit this vulnerability to elevate privileges...

Windows 10 Endpoints Are Not Redirecting Input Devices Properly And Output Redirection Works Fine

This Local Policy Settings must be enabled within the VDA and Endpoint: Local Group Policy Editor: "Computer Configuration Administrative Templates Windows Components Remote Desktop Services Remote Desktop Session Host Device and Resource Redirection" Allow Audio And Video Playback Redirection...

Sherpa Connector Service v2020.2.20328.2050 - Unquoted Service Path

Exploit Title: Sherpa Connector Service v2020.2.20328.2050 - Unquoted Service Path Exploit Author: Manthan Chhabra netsectuna, Harshit fumenoid Version: 2020.2.20328.2050 Date: 02/04/2022 Vendor Homepage: http://gimmal.com/ Vulnerability Type: Unquoted Service Path Tested on: Windows 10 CVE:...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CNVD-2022-60121)

Microsoft Edge is a web browser that comes with versions of Windows 10 and later, and an elevation of privilege vulnerability exists in Microsoft Edge Chromium-based. An attacker could exploit this vulnerability to elevate privileges...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CNVD-2022-60122)

Microsoft Edge Chromium-based is vulnerable to an elevation-of-privilege vulnerability in Microsoft Edge, a web browser that ships with Windows 10 and later. An attacker could exploit this vulnerability to execute arbitrary code with elevated privileges...

Roxy File Manager 1.4.5 PHP File Upload Restriction Bypass Exploit

Roxy File Manager version 1.4.5 proof of concept exploit for a PHP file upload restriction bypass vulnerability. Exploit Title: Roxy File Manager 1.4.5 PHP File Upload Restriction Bypass Exploit Author: Adam Shebani NULLHE4D Software: Roxy File Manager Version: 1.4.5 CVE: CVE-2018-20525 Vendor...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CNVD-2022-60119)

Microsoft Edge is a web browser that comes with versions of Windows 10 and later, and an elevation of privilege vulnerability exists in Microsoft Edge Chromium-based. An attacker could exploit this vulnerability to elevate privileges...