1053 matches found
FFRI yarai security breach
FFRI yarai is a security application from FFRI Japan. It is capable of protecting internal systems from malware attacks that could jeopardize operational processes. A security vulnerability exists in FFRI yarai and FFRI yarai Home and Business Edition that stems from a failure to properly handle...
JVN#42527152: "FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly
"FFRI yarai" and "FFRI yarai Home and Business Edition" provided by FFRI Security, Inc. handle exceptional conditions improperly CWE-703. When the product's Windows Defender management feature is enabled, and Microsoft Defender detects some files matching specific conditions as a threat, the...
PVS Target Device hangs/freezes when placed under isolation by Windows Defender
The PVS Target VM goes into a hung state...
Security Updates for Windows Defender (July 2023)
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.23050.3. It is, therefore, affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Guidance on Microsoft Signed Drivers Being Used Maliciously
Executive Summary: Microsoft was recently informed that drivers certified by Microsoftâs Windows Hardware Developer Program MWHDP were being used maliciously in post-exploitation activity. In these attacks, the attacker gained administrative privileges on compromised systems before using the...
Microsoft Defender ĺŽĺ ¨ćźć´
Microsoft Defender is a threat protection software from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker can exploit the vulnerability to elevate privileges...
KLA50772 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-33156 Exploitation Related products Windows-Defender CVE list CVE-2023-33156 high KB list Solution Install necessary update...
VulnCheck KEV: CVE-2023-32049
Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt...
Forensia - Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase
AntiForensics Tool For Red Teamers, Used For Erasing Some Footprints In The Post Exploitation Phase. Reduces Payload Burnout And Increases Detection Countdown. Can Be Used To Test The capabilities of Your Incident Response / Forensics Teams. Capabilities Unloading Sysmon Driver. Gutmann Method Fi...
CVE-2023-29372
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
PT-2023-9955
Name of the Vulnerable Software and Affected Versions Windows Defender affected versions not specified Psexec affected versions not specified Goanywhere affected versions not specified Serv-u affected versions not specified Windows Registry affected versions not specified Task Scheduler affected...
WDAC Supplemental Policy for Veeam Backup & Replication Components on Azure Local
Azure Local is the new name for Azure Stack HCI Azure Stack HCI is now considered part of Azure Local. Learn more about this rename in the Microsoft Documentation: Renaming Azure Stack HCI to Azure Local. Veeam Backup & Replication Version Requirement The solution documented in this article...
May 9, 2023âKB5026370 (OS Build 20348.1726)
None None...
OCS Inventory NG 2.3.0.0 - Unquoted Service Path
Exploit Title: OCS Inventory NG 2.3.0.0 - Unquoted Service Path Date: 2023/04/21 Exploit Author: msd0pe Vendor Homepage: https://oscinventory-ng.org Software Link: https://github.com/OCSInventory-NG/WindowsAgent My Github: https://github.com/msd0pe-1 Fixed in version 2.3.1.0 OCS Inventory NG...
PowerMeUp - A Small Library Of Powershell Scripts For Post Exploitation That You May Need Or Use!
This is a powershell reverse shell that executes the commands and or scripts that you add to the powerreverse.ps1 file as well as a small library of Post-Exploitation scripts. This also can be used for post exploitation and lateral movement even. Please use at your own risk I am not and will not ...
The vulnerability of Microsoft Defender operating systems for Windows, which allows a hacker to trigger a service failure.
The vulnerability of Microsoft Defender operating systems on Windows is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted data...
KLA48959 SB vulnerability in Microsoft System Center
A security feature bypass vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2023-24934 Exploitation Public exploits exist for this vulnerability. Related products Windows-Defender CVE list...
Security Updates for Windows Defender (April 2023)
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.20200.4. It is, therefore, affected by a denial of service vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's...
KLA48846 DoS vulnerability in Microsoft System Center
A denial of service vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2023-24860 Exploitation Related products Windows-Defender CVE list CVE-2023-24860 critical KB list Solution Install necessary...
Security Updates for Windows Defender (March 2023)
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.20000.2. It is, therefore, affected by a privilege escalation vulnerability. An authenticated attacker can exploit this to gain elevated privileges. %NASLMINLEVEL 80900 C...