Exploit for Path Traversal in Microsoft

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-20...

Privilege escalation

Windows Virtual Registry Provider Elevation of Privilege Vulnerability...

Microsoft Windows 虚拟机信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. An information disclosure vulnerability exists in Windows virtual machines. The following products and versions are affected: Azure Service Fabric, Azure Spring Cloud...

PT-2021-2335 · Microsoft · Windows Virtual Registry Provider +1

Name of the Vulnerable Software and Affected Versions: Windows Virtual Registry Provider affected versions not specified Description: The issue is related to insecure privilege management in the Virtual Registry Provider component of the Windows operating system. Exploitation of this issue may...

Hotfix XS80E003 - For Citrix Hypervisor 8.0

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.0. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| Restart Host Content live patchable| No Baselines for Live Patch| N/A Revision History| Published on Jul 24,...

RegretLocker, new ransomware, can encrypt Windows virtual hard disks

Cybersecurity researchers discovered a new ransomware last month called RegretLocker that, despite a no-frills package, can do serious damage to virtual hard disks on Windows machines. Through a clever trick, RegretLocker can bypass the often-long encryption times required when encrypting a...

Time synchronization issues on Windows VMs with the 9.x Citrix VM Tools

On Windows VMs with the xeniface 9.0.0.11 or 9.1.0.4 driver installed, the VM time can become unsynchronized when the time set by the Citrix VM Tools conflicts with the Windows VM's own time synchronization for example, using Active Directory or NTP...

Huawei Desktop Cloud Windows Virtual Desktop Proxy Service hdpCommunication application suffers from a malicious lock screen vulnerability

Founded in 1987, Huawei Technologies Co. Ltd. is a global provider of ICT information and communications infrastructure and smart terminals. A malicious lock screen vulnerability exists in the Huawei Desktop Cloud Windows Virtual Desktop Agent Service hdpCommunication application, which can be...

Huawei Desktop Cloud Windows Virtual Desktop Proxy Service hdpCommunication application suffers from denial of service vulnerability

Founded in 1987, Huawei Technologies Co. Ltd. is a global provider of ICT information and communications infrastructure and smart terminals. A denial-of-service vulnerability exists in the hdpCommunication application of Huawei Desktop Cloud's Windows virtual desktop proxy service. An unauthorize...

Huawei Desktop Cloud Windows Virtual Desktop Agent Service hdpCommunication application suffers from denial of service vulnerability (CNVD-2020-27176)

Founded in 1987, Huawei Technologies Co. Ltd. is a global provider of ICT information and communications infrastructure and smart terminals. A denial-of-service vulnerability exists in the hdpCommunication application of the Windows virtual desktop proxy service of Huawei Desktop Cloud, where an...

Upgrading your Citrix Hypervisor Windows I/O drivers to the latest major version (9.x)

You can update your Windows VMs to the latest major version of the Windows I/O drivers quickly and easily by using Windows Updates, Management Agent updates, or by installing from the latest managementagentXX.msifile available at CTX235403. These latest version of the drivers, whose version numbe...

How to trigger a memory dump from a Windows virtual machine

This article describes how to trigger and capture a memory dump from a Windows Virtual Machine VM running on a XenServer 8 or Citrix Hypervisor 8.2 CU1 host. Refer to the Microsoft KB article, Generate a kernel or complete crash dump for more information. Troubleshooting unresponsive Windows VMs...

Memory corruption

The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service Windows virtual machine crash by triggering certain general protection faults GPF...