529 matches found
The vulnerability of the Windows Registry system registry in Microsoft Windows operating systems allows a perpetrator to cause service failures.
The vulnerability of the Windows Registry system registry in Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to cause a service failure by running a specially created application...
CVE-2020-1194
A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Service Vulnerability'...
CVE-2020-1194
A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Service Vulnerability'...
Denial of service
A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Service Vulnerability'...
CVE-2020-1194
A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of Service Vulnerability'...
Windows Registry Denial of Service Vulnerability
A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations. An attacker who successfully exploited the vulnerability could cause a denial of service against a system. To exploit the vulnerability, an attacker who has access to the system could run a...
KB4561674: Windows Server 2012 June 2020 Security Update
The remote Windows host is missing security update 4561674 or cumulative update 4561612. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory. An attacker who successfully exploited the...
Evilreg - Reverse Shell Using Windows Registry Files (.Reg)
Reverse shell using Windows Registry file .reg. Features: Reverse TCP Port Forwarding using Ngrok.io Requirements: Ngrok Authtoken for TCP Tunneling: Sign up at: https://ngrok.com/signup Your authtoken is available on your dashboard: https://dashboard.ngrok.com Install your auhtoken: ./ngrok...
Sphinx Malware Returns to Riddle U.S. Targets, with Modifications
The Zeus Sphinx banking trojan has seen a recent resurgence in the United States, sporting some modifications and using COVID-19 spam as a lure. Sphinx re-emerged in December but saw a big spike in March via the use of coronavirus themes. Since April, it has been seen attacking U.S. targets with ...
CVE-2020-8146
In UniFi Video v3.10.1 for Windows 7/8/10 x64 there is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack vulnerabilities. The issue was fixed by adjusting the .tsExport folder when the controller is running on Windows and adjusting the SafeDllSearchMode in the...
DecryptTeamViewer - Enumerate And Decrypt TeamViewer Credentials From Windows Registry
Uses CVE-2019-18988 to enumerate and decrypt TeamViewer credentials from Windows registry. Blogpost detailing the vulnerability: https://whynotsecurity.com/blog/teamviewer/ Usage .\DecryptTeamViewer.exe Download DecryptTeamViewer...
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2019-1689)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Persistence – Image File Execution Options Injection
Image File Execution Options is a Windows registry key which enables developers to attach a debugger to an application and to enable "GlobalFlag" for application debugging. This behavior of Windows opens the door for persistence since an arbitrary executable can be used as a debugger of a specifi...
NewStart CGSL CORE 5.05 / MAIN 5.05 : samba Vulnerability (NS-SA-2019-0244)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has samba packages installed that are affected by a vulnerability: - A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to crea...
Security Bulletin: IBM Db2 High Performance Unload is affected by 3RD PARTY - - Unquoted Service Path vulnerability
Summary IBM Db2 High Performance Unload has addressed the following vulnerability:Unquoted Service Path Vulnerability Details CVEID: CVE-2019-4606 DESCRIPTION: IBM DB2 High Performance Unload could allow a local attacker to execute arbitrary code on the system, caused by an untrusted search path...
Amazon Linux AMI : samba (ALAS-2019-1329)
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. CVE-2019-388...
Amazon Linux 2 : samba (ALAS-2019-1351)
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share.CVE-2019-3880...
McAfee Total Protection Information Disclosure Vulnerability
McAfee Total Protection MTP is a suite of antivirus software from the American company McAfee. An information disclosure vulnerability exists in McAfee MTP 16.0.R21 and prior versions, which can be exploited by an attacker to read the plaintext list of AV-Scan excluded files from the Windows...
Design/Logic Flaw
A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...
CVE-2019-3636 File masquerade attack vulnerability in McAfee Total Protection
A File Masquerade vulnerability in McAfee Total Protection MTP version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Windows registry, and to possibly replace excluded files with potential malware without being detected...