Microsoft SharePoint Unsafe Control and ViewState RCE

The EditingPageParser.VerifyControlOnSafeList method fails to properly validate user supplied data. This can be leveraged by an attacker to leak sensitive information in rendered-preview content. This module will leak the ViewState validation key and then use it to sign a crafted object that will...

Microsoft Windows Defender Multiple Vulnerabilities (Jun 2021)

This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Windows Defender Protection Engine dated 08-06-2021. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

2021-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5003638)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. A security vulnerability exists in Windows Installer. The following products and versions are affected:Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windo...

Microsoft Hyper-V 缓冲区错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A buffer error vulnerability exists in Microsoft Hyper-V. The following products and versions are affected:Windows 10 Version 1809 for x64-based...

June 8, 2021-KB5003542 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

None None...

NetMotion Mobility Server MvcUtil Java Deserialization

This module exploits an unauthenticated Java deserialization in the NetMotion Mobility server's MvcUtil.valueStringToObject method, as invoked through the /mobility/Menu/isLoggedOn endpoint, to execute code as the SYSTEM account. Mobility server versions 11.x before 11.73 and 12.x before 12.02 ar...

2021-05 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5003197)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Microsoft Bluetooth Driver 安全漏洞

Microsoft Bluetooth Driver is an American Microsoft application that provides native connectivity from Windows, Linux and macOS to Microsoft SQL Server and Microsoft Azure SQL databases. A security vulnerability exists in Microsoft Bluetooth Driver. The following products and versions are...

KB5003197: Windows 10 1607 / Windows Server 2016 Security Update (May 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Microsoft Hyper-V 安全特征问题漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Hyper-V is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 1803 for x64-base...

Microsoft Windows 安全特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. Microsoft Windows is vulnerable to a security feature issue. The following products and editions are affected: Windows 10 Version 1803 for 32-bit Systems,Windows 10 Version 180...

KB5001402: Servicing stack update for Windows 10, version 1607: April 13, 2021

None None...

2021-03 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5000803)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Microsoft Windows DNS 服务器安全漏洞

Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and together, DNS clients and DNS servers provide name resolution services for computers and users that map computer nam...

Microsoft Windows DNS 服务器安全漏洞

Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and together, DNS clients and DNS servers provide name resolution services for computers and users that map computer nam...

Microsoft Windows DNS 安全漏洞

Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and together, DNS clients and DNS servers provide name resolution services for computers and users that map computer nam...

Microsoft Windows Event Tracing 安全漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security vulnerability exists in Microsoft Windows Event Tracing. The following products and editio...

Microsoft Windows Update 后置链接漏洞

Microsoft Windows Update is a program update service from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Update. The following products and editions are affected: Windows 10 Version 1803 for 32-bit Systems,Windows 10 Version 1803 for x64-based Systems,Windows 10...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. The following products and versions are affected:Windows Server 2019 Server Core installation,Windows 10 Version 1909...