KakaoTalk Credential Gatherer

This module searches for KakaoTalk credentials on a Windows host. KakaoTalk is a popular mobile messaging app most widely used in South Korea. Module Options msf use post/windows/gather/credentials/kakaotalk msf postkakaotalk show actions ...actions... msf postkakaotalk set ACTION msf postkakaota...

CVE-2021-27022

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes inventory service nodes...

CVE-2021-27022

A flaw was discovered in bolt-server and ace where running a task with sensitive parameters results in those sensitive parameters being logged when they should not be. This issue only affects SSH/WinRM nodes inventory service nodes...

VulnCheck KEV: CVE-2019-1225

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to...

VulnCheck KEV: CVE-2019-1224

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to...

Microsoft Patch Tuesday, August 2021 Edition

Microsoft today released software updates to plug at least 44 security vulnerabilities in its Windows operating systems and related products. The software giant warned that attackers already are pouncing on one of the flaws, which ironically enough involves an easy-to-exploit bug in the software...

PT-2021-3814

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A remote code execution issue exists in the Remote Desktop Client for Microsoft Windows. The flaw is caused by a memory buffer out-of-bounds operation, which allows a remote...

CVE-2021-34457

Windows Remote Access Connection Manager Information Disclosure Vulnerability...

CVE-2021-34507

Windows Remote Assistance Information Disclosure Vulnerability...

CVE-2021-33763

Windows Remote Access Connection Manager Information Disclosure Vulnerability...

Information disclosure

Windows Remote Assistance Information Disclosure Vulnerability...

Windows Remote Access Connection Manager Information Disclosure Vulnerability

...

Windows Remote Access Connection Manager Information Disclosure Vulnerability

...

PT-2021-5181 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to insecure privilege management in the Remote Access Connection Manager service of the Microsoft Windows operating system. It allows a...

Microsoft Windows Remote Access Connection Manager 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation-of-privilege vulnerability exists in the Remote Access Connection Manager in Microsoft...

Microsoft Windows Remote Assistance 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in "Remote Assistance" in Microsoft Windows/Windows Server...

PT-2021-5679 · Microsoft · Windows Remote Assistance +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Assistance affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Remote Assistance tool. This can allow a remote attacker to gain unauthorized access to...

CVE-2021-31968

Windows Remote Desktop Services Denial of Service Vulnerability...

PT-2021-3280 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Description: The issue is related to resource release errors in Windows Remote Desktop Services, which can be exploited by a remote attacker to cause a denial of service. This...

KLA12202 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...