984 matches found
WhatsUp Gold 2022 (22.1.0 Build 39) - XSS
Exploit Title: WhatsUpGold 22.1.0 - Stored Cross-Site Scripting XSS Date: April 18, 2023 Exploit Author: Andreas Finstad 4ndr34z Vendor Homepage: https://www.whatsupgold.com Version: v.22.1.0 Build 39 Tested on: Windows 2022 Server CVE : CVE-2023-35759 Reference:...
Exploit for Out-of-bounds Write in Microsoft
CVE-2023-28252-Compiled-exe A modification of Fortra's excell...
Microsoft Subsystem for Linux Security Vulnerability
Microsoft Windows Subsystem for Linux WSL is a Windows subsystem for Linux from Microsoft, a compatibility layer capable of running native Linux binary executables ELF format. A security vulnerability exists in Microsoft Subsystem for Linux. An attacker could exploit the vulnerability to gain...
Microsoft Windows Online Certificate Status Protocol Security Vulnerability
Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows Online Certificate Status Protocol OCSP. An attacker exploiting this vulnerability could gain access to sensitive information. The...
Microsoft Windows Kernel-Mode Drivers Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Kernel-Mode Drivers. An attacker could exploit the vulnerability to elevate privileges. The following products an...
Microsoft Windows Themes Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Themes. An attacker could exploit this vulnerability to obtain sensitive information. The following products and...
Microsoft .NET and Microsoft Visual Studio Security Vulnerabilities
Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...
Microsoft Windows AllJoyn API Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows AllJoyn API. An attacker has exploited the vulnerability to cause a denial of service on the system. The...
Microsoft Windows Server Key Distribution Service Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Server Key Distribution Service. An attacker could exploit this vulnerability to bypass certain features. The following products and...
Microsoft SQL Server Security Vulnerability
Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker could exploit the vulnerability to bypass certain functionality. The following products and versions are affected:...
Microsoft Windows Themes Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Themes. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and...
Metasploit 2023 Annual Wrap-Up: Dec. 29, 2023
As 2023 winds down, we’re taking another look back at all the changes and improvements to the Metasploit Framework. This year marked the 20th anniversary since Metasploit version 1.0 was committed and the project is still actively maintained and improved thanks to a thriving community. Version 6....
PT-2023-9403 · Microsoft · Windows 11 +5
Name of the Vulnerable Software and Affected Versions: Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 affected versions not specified Description: A Denial of Service in the CLFS.sys driver allows a malicious authenticated low-privilege user to...
2023-12 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5033464)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...
Schneider Electric Easy UPS Online Monitoring Software
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Vendor: Schneider Electric Equipment: Easy UPS Online Monitoring Software Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow elevation of privileges which could result in arbitrary file...
December 12, 2023—KB5033118 (OS Build 20348.2159)
None None...
Microsoft Windows DHCP Server Security Vulnerability
Microsoft Windows is a set of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows DHCP Server. An attacker has exploited the vulnerability to cause a denial of service on the system. The following products and editions are...
Microsoft Windows DHCP Server Security Vulnerability
Microsoft Windows is a set of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows DHCP Server. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and editions are...
Microsoft ODBC Driver Security Vulnerability
Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker exploiting this vulnerability could remotely execute cod...
Microsoft Windows Media Foundation Security Vulnerability
Microsoft Windows Media Foundation is a multimedia development library from Microsoft that aims to provide a unified multimedia solution for the Windows platform, allowing developers to play video and sound files, encode audio and video, or transcode multimedia files. Developers can use Media...