Lucene search
K

1946 matches found

BDU FSTEC
BDU FSTEC
added 2024/03/20 12:0 a.m.1 views

The vulnerability of the ODBC driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.01947EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:0 a.m.3 views

The vulnerability of the ODBC driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.02026EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:0 a.m.1 views

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01947EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/15 12:0 a.m.2 views

The vulnerability of the USB Hub driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the USB Hub driver for Windows operating systems and Windows Server is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.2CVSS7.3AI score0.00904EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/11 12:0 a.m.2 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS8.3AI score0.01628EPSS
Exploits0References3
Penetration Testing Lab
Penetration Testing Lab
added 2024/03/05 7:54 a.m.14 views

Persistence – Explorer

Windows File Explorer is the is the graphical file management utility for the Windows operating system and the default desktop environment. Windows explorer was introduced… Continue reading - Persistence - Explorer...

7.4AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/03/05 12:0 a.m.2 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.3AI score0.01652EPSS
Exploits0References2
Kitploit
Kitploit
added 2024/03/01 11:30 a.m.27 views

RKS - A Script To Automate Keystrokes Through A Graphical Desktop Program

A script to automate keystrokes through an active remote desktop session that assists offensive operators in combination with living off the land techniques. About RKS RemoteKeyStrokes All credits goes to nopernik for making it possible so I took it upon myself to improve it. I wanted something...

8AI score
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/02/27 12:0 a.m.1 views

The vulnerability of Microsoft Defender for Endpoint’s Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Microsoft Defender for Endpoint on the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.00633EPSS
Exploits0References3
CNVD
CNVD
added 2024/02/23 12:0 a.m.31 views

Microsoft Office Remote Code Execution Vulnerability (CNVD-2024-10429)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A remote code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute arbitrary code on a system...

7.8CVSS8.5AI score0.01177EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/02/20 5:35 p.m.11 views

CVE-2024-22250 Session Hijack Vulnerability in Deprecated EAP Browser Plugin

Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the same system...

7.8CVSS6.6AI score0.00348EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/02/20 5:35 p.m.17 views

CVE-2024-22250 Session Hijack Vulnerability in Deprecated EAP Browser Plugin

Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the same system...

7.8CVSS8.1AI score0.00348EPSS
Exploits0References1
CVE
CVE
added 2024/02/20 5:35 p.m.107 views

CVE-2024-22250

CVE-2024-22250 affects the VMware Enhanced Authentication Plug‑in (EAP). The connected sources describe two related issues: (1) CVE-2024-22250 enables a local attacker with unprivileged access to hijack a privileged EAP session during Windows logon, via the EAP flow used in vCenter web console; a...

7.8CVSS8.3AI score0.00348EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/02/20 12:0 a.m.1 views

The vulnerability of the ODBC Driver for dynamic layout in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the ODBC Driver for dynamic layout in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.7AI score0.01372EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/02/20 12:0 a.m.2 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.3AI score0.01484EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/02/20 12:0 a.m.3 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.01575EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/02/20 12:0 a.m.2 views

The vulnerability in the implementation of the LDAP service protocol on Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.8CVSS6.9AI score0.02079EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/02/20 12:0 a.m.2 views

The vulnerability of the Windows operating system’s Network Address Translation (NAT) technology allows a hacker to induce a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

5.9CVSS6.8AI score0.01691EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.2 views

The vulnerability of the Trusted Computing Base (TCB) system in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Trusted Computing Base TCB system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

4.1CVSS6.4AI score0.00482EPSS
Exploits0References3
Citrix
Citrix
added 2024/02/15 12:0 a.m.8 views

Idle session timeout warning message does not display in ICA session

The below idle session timeout warning message is not displayedbefore the idle ICA session is disconnected. The idle session timeout warning shows up in RDP session on the same VDA. The Idle session timers are configured via RDSH policy. The issue is only seen in ICA session when HDX Adaptive...

7AI score
Exploits0
Rows per page
Query Builder