Microsoft Message Queuing Security Vulnerability

Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to cause a denial of service. The following products and editio...

KLA51710 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation...

Microsoft Windows Mobile Device Management Security Vulnerability

Microsoft Windows Mobile Device Management is a software service from Microsoft Corporation USA for Windows devices to support interaction with mobile devices. A security vulnerability exists in Microsoft Windows Mobile Device Management. An attacker could exploit the vulnerability to elevate...

Microsoft Windows Windows Smart Card Resource Management Server Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Smart Card Resource Management Server. An attacker could exploit this vulnerability to bypass certain functionality. The following...

Microsoft Message Queuing Security Vulnerability

Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker exploiting this vulnerability could remotely execute code. The following products and editions a...

Microsoft Message Queuing Security Vulnerability

Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to cause a denial of service. The following products and editio...

Microsoft Message Queuing Security Vulnerability

Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to cause a denial of service. The following products and editio...

Microsoft Hyper-V Security Vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Role: A security vulnerability exists in Windows Hyper-V. An attacker exploiting this vulnerability could gain access to sensitive...

Microsoft Windows Group Policy Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Group Policy. An attacker could exploit this vulnerability to bypass certain features. The following products and...

Perch CMS 3.2 Cross Site Scripting

Exploit Title: Date: 07/2023 Exploit Author: Andrey Stoykov Version: 3.2 Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com XSS 1: File: roles.edit.post.php Line 57: ... error'roleTitle', false;?" label'roleTitle', 'Title'; ? text'roleTitle', $Form-get$details, 'roleTitle'; ?...

WBCE 1.6.1 Cross Site Scripting

Exploit Title: WBCE - Stored XSS Date: 07/2023 Exploit Author: Andrey Stoykov Version: 1.6.1 Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com Steps to Exploit: 1. Login to application 2. Browse to following URI "http://host/wbce/admin/pages/intro.php" 3. Paste XSS payload "TEST...

XAMPP 8.2.4 - Unquoted Path Vulnerability

Exploit Title: XAMPP 8.2.4 - Unquoted Path Exploit Author: Andrey Stoykov Version: 8.2.4 Software Link: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/8.2.4/xampp-windows-x64-8.2.4-0-VS16-installer.exe Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com/ Steps to...

XAMPP 8.2.4 - Unquoted Path

Exploit Title: XAMPP 8.2.4 - Unquoted Path Date: 07/2023 Exploit Author: Andrey Stoykov Version: 8.2.4 Software Link: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/8.2.4/xampp-windows-x64-8.2.4-0-VS16-installer.exe Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com...

XAMPP 8.2.4 Unquoted Service Path

Exploit Title: XAMPP 8.2.4 - Unquoted Path Date: 07/2023 Exploit Author: Andrey Stoykov Version: 8.2.4 Software Link: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/8.2.4/xampp-windows-x64-8.2.4-0-VS16-installer.exe Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. An attacker could exploit this vulnerability to cause a deni...

Microsoft Windows Local Security Authority (LSA) 安全漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

Microsoft Windows Deployment Services 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Deployment Services. An attacker could exploit this vulnerability to cause a denial of service. The following...

Microsoft Windows OLE 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows OLE. An attacker exploiting this vulnerability could remotely execute code. The following products and versions a...

Microsoft Windows Clip Service 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Clip Service. An attacker could exploit this vulnerability to gain elevated privileges. The following products an...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. An attacker could exploit this vulnerability to cause a deni...