CVE-2018-8475

A remote code execution vulnerability exists when Windows does not properly handle specially crafted image files, aka "Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Serve...

CVE-2018-8419

An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...

iCash 7.6.5 Denial Of Service

Exploit Title: iCash 7.6.5 - Denial of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-09-12 Software Link: https://www.maxprog.com/site/misc/downloadsus.php Tested Version: 7.6.5 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python exploit script, it will create a new...

PDF Explorer 1.5.66.2 Denial Of Service

Exploit Title: PDF Explorer 1.5.66.2 - Denial of Service PoC Author: Gionathan "John" Reale Discovey Date: 2018-09-12 Software Link: https://www.rttsoftware.com/files/PDFExplorerTrialSetup.zip Tested Version: 1.5.66.2 Tested on OS: Windows 7 32-bit Steps to Reproduce: Run the python exploit scrip...

CVE-2018-8446

CVE-2018-8446 is an information disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 (and Windows Server 2016/Servers). The issue is described as a lo...

CVE-2018-8433

An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft Graphics Component Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 201...

STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation (1)

/ Exploit Title: STOPzilla AntiMalware 6.5.2.59 - Privilege Escalation Date: 2018-09-13 Author: Parvez Anwar @parvezghh Vendor Homepage: https://www.stopzilla.com/ Software link: https://download.stopzilla.com/binaries/stopzilla/autoinstaller/STOPzillaAntiMalware.msi Tested Version: 6.5.2.59 Driv...

MediaTek Wirless Utility rt2870 - Denial of Service (PoC)

Exploit Title: MediaTek Wirless Utility rt2870 - Denial of Service PoC Autor: Lawrence Amer Date: 2018-09-13 Vendor: MediaTek Software url: https://click.pstmrk.it/2ts/d86o2zu8ugzlg.cloudfront.net%2Fmediatek-craft%2Fdrivers%2FRT27702870RT307x.zip/K94pHAI/oTs1/oC6CdN114w Tested on OS: Windows 7...

Clone2Go Video to iPod Converter 2.5.0 - Denial of Service (PoC)

Clone2Go Video to iPod Converter 2.5.0 - Denial of Service PoC Exploit Title: Clone2Go Video to iPod Converter 2.5.0 - Denial of Service PoC Exploit Author: ZwX Exploit Date: 2018-09-11 Vendor Homepage : http://www.clone2go.com/ Software Link: http://www.clone2go.com/down/video-to-ipod-setup.exe...

CVE-2018-8393

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,...

CVE-2018-8440

CVE-2018-8440 is a Windows elevation-of-privilege flaw in ALPC handling, enabling local privilege escalation via the ALPC Task Scheduler interface. Public details in connected docs show exploit PoCs and proof-of-concept code exist (e.g., CANVAS and metasploit references) and that tested environme...

CVE-2018-8475

CVE-2018-8475 is a Windows remote code execution vulnerability caused by improper handling of specially crafted image files. Affected: Windows 7; Windows Server 2008/2012; Windows 8.1; Windows RT 8.1; Windows 10; Windows Server 2008 R2/2012/2016; Windows 10 Servers. The description does not provi...

CVE-2018-8336

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8419, CVE-2018-8442,...

CVE-2018-8410

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server...

CVE-2018-8332

CVE-2018-8332 is a remote code execution vulnerability in the Windows font library (Win32k) where specially crafted embedded fonts are mishandled. It affects a broad set of Windows platforms including Windows 7, Windows 8.1, Windows 10 (and server equivalents listed in the initial entry), as well...

CVE-2018-8422

CVE-2018-8422 and CVE-2018-8424 describe information-disclosure flaws in the Windows GDI component, where memory contents can be leaked. Affected products include Windows 7 and various Windows Server editions (e.g., 2008 R2, 2012 R2, 2016, and related Server/Windows 10 variants per entry). Root c...

MediaTek Wirless Utility rt2870 - Denial of Service (PoC)

MediaTek Wirless Utility rt2870 - Denial of Service PoC Exploit Title: MediaTek Wirless Utility rt2870 - Denial of Service PoC Autor: Lawrence Amer Date: 2018-09-13 Vendor: MediaTek Software url:...

CVE-2018-8419

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2018-8410

CVE-2018-8410 is a Windows Kernel API elevation-of-privilege vulnerability caused by improper handling of registry objects in memory. The Windows kernel vulnerability affects multiple OS versions (Windows 7, Server 2012/2012 R2, RT 8.1, 8.1, 10, 2016/2008 R2 etc.) as listed in the initial descrip...

CVE-2018-8336

CVE-2018-8336 is an information-disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected are Windows Server 2008, Windows 7, and Windows Server 2008 R2. The entry notes it is distinct from CVE-2018-8419 and other related CVEs. The initial descripti...