14415 matches found
Microsoft Windows Cryptographic Services 信息泄露漏洞
Microsoft Windows Cryptographic Services is an encryption service provider program from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Cryptographic Services. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...
KB5005412: Servicing stack update for Windows 10, version 1909: August 10, 2021
None None...
KB5005030: Windows 10 Version 1809 and Windows Server 2019 Security Update (August 2021)
The remote Windows host is missing security update 5005030. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-26424, CVE-2021-26432,...
About the security content of iTunes 12.11.4 for Windows
About the security content of iTunes 12.11.4 for Windows This document describes the security content of iTunes 12.11.4 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
Men Salon Management System 1.0 - SQL Injection Authentication Bypass
Exploit Title: Men Salon Management System 1.0 - SQL Injection Authentication Bypass Date: 2021-07-30 Exploit Author: Akshay Khanna ConfusedBot Vendor Homepage: https://phpgurukul.com/men-salon-management-system-using-php-and-mysql/ Software Link:...
Men Salon Management System 1.0 SQL Injection
Exploit Title: Men Salon Management System 1.0 - SQL Injection Authentication Bypass Date: 2021-07-30 Exploit Author: Akshay Khanna ConfusedBot Vendor Homepage: https://phpgurukul.com/men-salon-management-system-using-php-and-mysql/ Software Link:...
Event Registration System With QR Code 1.0 Shell Upload
Exploit Title: Event Registration System with QR Code 1.0 - Authentication Bypass & RCE Exploit Author: Javier Olmedo Date: 27/07/2021 Vendor: Sourcecodester Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/event0.zip Affected Version: 1.0 Category: WebApps...
Event Registration System with QR Code 1.0 - Authentication Bypass
Exploit Title: Event Registration System with QR Code 1.0 - Authentication Bypass & RCE Exploit Author: Javier Olmedo Date: 27/07/2021 Vendor: Sourcecodester Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/event0.zip Affected Version: 1.0 Category: WebApps...
Customer Relationship Management System (CRM) 1.0 Sql Injection Authentication Bypass Vulnerability
Exploit Title: Customer Relationship Management System CRM 1.0 - Sql Injection Authentication Bypass Exploit Author: ShafiqueWasta Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...
Customer Relationship Management System (CRM) 1.0 - Sql Injection Authentication Bypass
Exploit Title: Customer Relationship Management System CRM 1.0 - Sql Injection Authentication Bypass Date: 27/07/2021 Exploit Author: ShafiqueWasta Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...
XOS Shop 1.0.9 - (Multiple) Arbitrary File Deletion (Authenticated) Vulnerability
Exploit Title: XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion Authenticated Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://xos-shop.com Software Link: https://github.com/XOS-Shop/xosshopsystem/releases/tag/v1.0.9 Version: 1.0.9 Tested on: Windows 10, XAMP...
Microsoft Edge Information Disclosure Vulnerability (CNVD-2021-54696)
Microsoft Edge is a web browser that comes with Windows 10 and later versions of Microsoft Corporation Microsoft in the U.S. Microsoft Edge has a security vulnerability that could be exploited by attackers to cause information leakage...
XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion (Authenticated)
Exploit Title: XOS Shop 1.0.9 - 'Multiple' Arbitrary File Deletion Authenticated Date: 2021-07-25 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://xos-shop.com Software Link: https://github.com/XOS-Shop/xosshopsystem/releases/tag/v1.0.9 Version: 1.0.9 Tested on:...
Microsoft Edge Information Disclosure Vulnerability (CNVD-2021-54695)
Microsoft Edge is a web browser that comes with Windows 10 and later versions of Microsoft Corporation Microsoft in the U.S. Microsoft Edge has a security vulnerability that could be exploited by attackers to cause information leakage...
Microsoft Edge Information Disclosure Vulnerability (CNVD-2021-54694)
Microsoft Edge is a web browser that comes with Windows 10 and later versions of Microsoft Corporation Microsoft in the U.S. Microsoft Edge has a security vulnerability that could be exploited by attackers to cause information leakage...
Exploit for CVE-2021-36934
PyNightmare PoC for CVE-2021-36934 Aka HiveNightmare/SeriousSA...
Microsoft Issues Windows 10 Workaround Fix for ‘SeriousSAM’ Bug
A privilege escalation bug, affecting versions of Windows 10, received a workaround fix by Microsoft Wednesday to prevent attackers from accessing data and creating new accounts on compromised systems. The bug, dubbed SeriousSAM, affects the Security Accounts Manager SAM database in all versions ...
Exploit for CVE-2021-36934
Invoke-HiveNightmare PowerShell-based PoC for CVE-2021-36934,...
Microsoft SAM File Readability CVE-2021-36934: What You Need to Know
On Monday, July 19, 2021, community security researchers began reporting that the Security Account Manager SAM file on Windows 10 and 11 systems was READ-enabled for all local users. The SAM file is used to store sensitive security information, such as hashed user and admin passwords. READ...
Mail.ru: [play.skillbox.ru] CRLF Injection
Domain, site, application The / folder / to / folder redirect script is vulnerable to a CRLF Injection attack. PoC Setting cookie crlf=CRLF;domain=.skillbox.ru;path=/;/ All browsers except FireFox are affected Affected URL: http://play.skillbox.ru/ Payload...