PT-2024-2841 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Authentication component of Windows operating systems. It is caused by incorrect link resolution before...

PT-2024-4621 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a lack of authentication for a critical function in the Windows Update Stack component of the Microsoft Windows operating system. This can be exploited to...

Microsoft Windows Local Security Authority Subsystem Service 安全漏洞

Microsoft Windows Local Security Authority Subsystem Service is an internal program of Microsoft Corporation USA that runs Windows system security policies. It verifies user identity, manages user password changes, and generates access characters when a user logs on to a computer standalone or...

PT-2024-2784 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in the Secure Boot protocol implementation of Windows operating systems. This could allow a remote attacker to bypass security restrictions...

Microsoft DWM Core Library 安全漏洞

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation, USA. A security vulnerability exists in Microsoft DWM Core Library. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are...

The vulnerability in the Windows Error Reporter registration service allows a hacker to execute arbitrary code. This vulnerability affects browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird for Windows operating systems.

The vulnerability of the Windows Error Reporter registration service in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird on Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the application software interface AllJoyn on Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the AllJoyn application programming interface for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the ODBC driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ODBC driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ODBC driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Mozilla Firefox < 124.0

The version of Firefox installed on the remote Windows host is prior to 124.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-12 advisory. - Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that...

The vulnerability of the USB Hub driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the USB Hub driver for Windows operating systems and Windows Server is related to insufficient input validation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to numerical truncation errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Microsoft Message Queuing (MSMQ) queue service on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Message Queuing MSMQ queue service on Windows operating systems is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Persistence – Explorer

Windows File Explorer is the is the graphical file management utility for the Windows operating system and the default desktop environment. Windows explorer was introduced… Continue reading - Persistence - Explorer...

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

RKS - A Script To Automate Keystrokes Through A Graphical Desktop Program

A script to automate keystrokes through an active remote desktop session that assists offensive operators in combination with living off the land techniques. About RKS RemoteKeyStrokes All credits goes to nopernik for making it possible so I took it upon myself to improve it. I wanted something...

The vulnerability of Microsoft Defender for Endpoint’s Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Microsoft Defender for Endpoint on the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Office Remote Code Execution Vulnerability (CNVD-2024-10429)

Microsoft Office is a suite of office software based on the Windows operating system developed by Microsoft. A remote code execution vulnerability exists in Microsoft Office, which can be exploited by an attacker to execute arbitrary code on a system...