CVE-2021-36972

Windows SMB Information Disclosure Vulnerability...

EUVD-2021-23536

Windows SMB Information Disclosure Vulnerability...

Remote Desktop Client Detection (Windows SMB Login)

Detects the installed version of Remote Desktop Client. The script logs in via smb, searches for Remote Desktop Client in the registry and gets the version from SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

This is a proof-of-concept PoC exploit for CVE-2020-0796, also known as SMBGhost, a pre-authentication remote code execution vulnerability in Windows SMBv3 servers. The exploit is written in Python and uses the SMB protocol to exploit the vulnerability. The PoC is designed for demonstration...

PuTTY Session Manager Detection (Windows SMB Login)

SMB login-based detection of PuTTY Session Manager. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security feature bypass

Windows SMB Client Security Feature Bypass Vulnerability...

Microsoft Windows SMB Client 安全特征问题漏洞

Microsoft Windows SMB Client is a Microsoft application. An SMB Client. Microsoft Windows SMB Client is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 2004 for 32-bit Systems,Windows 10 Version 2004 for ARM64-based Systems,Windows 10...

CVE-2021-28325 Windows SMB Information Disclosure Vulnerability

...

Windows SMB Information Disclosure Vulnerability

...

KLA12139 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...

Information disclosure

Windows SMB Information Disclosure Vulnerability...

Adobe Lightroom Classic Detection (Windows SMB Login)

Detects the installed version of Adobe Lightroom Classic. The script logs in via smb, searches for SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Windows SMB Information Disclosure Vulnerability

...

KLA12025 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation...

MS17-010

This repository is for public analysis of the MS17-010 vulnerability. The repository contains various proof-of-concept PoC exploits and scripts for exploiting the vulnerability, which affects the Windows SMB protocol. The exploits are designed to demonstrate the vulnerability's impact and are not...

Adobe Premiere Pro Detection (Windows SMB Login)

Detects the installed version of Adobe Premiere Pro. The script logs in via smb, searches for Adobe Premiere Pro in the registry and gets the version from SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Adobe Premiere Rush Detection (Windows SMB Login)

Detects the installed version of Adobe Premiere Rush. The script logs in via smb, searches for Adobe Premiere Rush in the registry and gets the version from SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2020-1301

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests, aka 'Windows SMB Remote Code Execution Vulnerability'...

KLA11806 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, bypass security restrictions. Below is a complete list of...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

PoC exploit for CVE-2020-0796 - SMBv3 RCE. The target product/service is Windows SMBv3. The vulnerability class/vector is Remote Code Execution RCE. The probable entry point is the scanner.py script, which sends a specially crafted SMB packet to the target server to check for vulnerability. Notab...