22288 matches found
KB5001337: Windows 10 version 1909 / Windows Server 1909 Security Update (Apr 2021)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072, CVE-2021-28310 - Windows Media Photo Codec Information Disclosure Vulnerability CVE-2021-27079 - Windows Event Tracing Elevati...
Security Bulletin: Multiple Vulnerabilities in Windows Server supporting products bundled with Cloud Pak Systems
Summary Multiple Vulnerabilities identified in MS Windows Server platforms. Information about vulnerabilities has been published in the provider security update guide. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Main...
Exploit for CVE-2020-1472
Zerologon...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5001880)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB5001880 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...
Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB5001882)
Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 KB5001882 Applies to:Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 IMPORTANT Verify that you have installed the required updates...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 (KB5001881)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1, RT 8.1, and Windows Server 2012 R2 KB5001881 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...
Who Contains the Containers?
Posted by James Forshaw, Project Zero This is a short blog post about a research project I conducted on Windows Server Containers that resulted in four privilege escalations which Microsoft fixed in March 2021. In the post, I describe what led to this research, my research process, and insights...
The vulnerability of the DNS server service in Windows Server operating systems allows a perpetrator to cause a service failure.
The vulnerability of the DNS server service in Windows Server operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Windows Gather Exchange Server Mailboxes
This module will gather information from an on-premise Exchange Server running on the target machine. Two actions are supported: LIST default action: List basic information about all Exchange servers and mailboxes hosted on the target. EXPORT: Export and download a chosen mailbox in the form of a...
Microsoft Exchange ProxyLogon Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Exchange ProxyLogon RCE', 'Description' = %q This module exploit a vulnerability on Microsoft Exchange Server that allows an attacker...
Exploit for CVE-2017-0144
CVE-2017-0144---EtneralBlue-MS17-010-Remote-Code-Execution Th...
Metasploit Wrap-Up
Windows Server 2012 Fun Community contributor Erik Wynter added a local exploit module for a DLL hijacking vulnerability he discovered in Windows Server 2012. The TiWorker.exe process that runs as NT AUTHORITY\SYSTEM attempts to load SrClient.dll, which does not exist on the system. Because of...
The vulnerability of the DNS server service in Windows Server operating systems allows a perpetrator to cause a service failure.
The vulnerability of the DNS server service in Windows Server operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the DNS server service in Windows Server operating systems allows a hacker to execute arbitrary code.
The vulnerability of the DNS server service in Windows Server operating systems is related to improper code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Windows Server 2012 SrClient DLL Hijacking Exploit
All editions of Windows Server 2012 but not 2012 R2 are vulnerable to DLL hijacking due to the way TiWorker.exe will try to call the non-existent SrClient.dll file when Windows Update checks for updates. This issue can be leveraged for privilege escalation if %PATH% includes directories that are...
KB5001641: March 9, 2021 update causes Windows Server 2012 to not print graphical content
KB5001641: March 9, 2021 update causes Windows Server 2012 to not print graphical content Summary This update resolves the following issue: Addresses an issue that fails to print the graphical content in a document after installing the March 9, 2021 update. Known issues in this update We are...
KB5001642: March 9, 2021 update causes Windows Server 2008 SP2 to not print graphical content
KB5001642: March 9, 2021 update causes Windows Server 2008 SP2 to not print graphical content Summary This update resolves the following issue: Addresses an issue that fails to print the graphical content in a document after installing the March 9, 2021 update. Known issues in this update We are...
Windows Server 2012 SrClient DLL Hijacking
class MetasploitModule 'Windows Server 2012 SrClient DLL hijacking', 'Description' = %q All editions of Windows Server 2012 but not 2012 R2 are vulnerable to DLL hijacking due to the way TiWorker.exe will try to call the non-existent SrClient.dll file when Windows Update checks for updates. This...
