22290 matches found
PT-2019-3162 · Microsoft · Windows Dhcp Server Service +1
Name of the Vulnerable Software and Affected Versions: Windows Server DHCP service affected versions not specified Description: A memory corruption issue exists in the Windows Server DHCP service, allowing an attacker to run arbitrary code on the DHCP server by sending specially crafted packets...
Microsoft Windows Kernel CVE-2019-1227 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1803 for 32-bit Systems Microsoft Windows 10 Version...
Microsoft Windows Graphics Component CVE-2019-1149 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Office 2019...
Microsoft Windows JET Database Engine CVE-2019-1155 Remote Code Execution Vulnerability
Description Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Office 2010 32-bit edition SP2 Microsoft Office 2010 64-bit editi...
Microsoft Windows SymCrypt CVE-2019-1171 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1709 for ARM64-based Systems Microsoft Windows 10 Versi...
Microsoft Windows Hyper-V CVE-2019-0965 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1803 for x64-based Systems Microsoft Windows 10...
PT-2019-3053 · Microsoft · Windows Dhcp Server Service +1
Name of the Vulnerable Software and Affected Versions: Windows Server DHCP service affected versions not specified Description: A memory corruption issue exists in the Windows Server DHCP service, allowing an attacker to send specially crafted packets to a DHCP failover server, potentially causin...
July 9, 2019—KB4507458 (OS Build 10240.18275)
None None...
July 9, 2019—KB4507462 (Monthly Rollup)
None None...
July 9, 2019—KB4507469 (OS Build 17763.615)
None None...
July 9, 2019—KB4507456 (Security-only update)
None None...
July 9, 2019—KB4507464 (Security-only update)
None None...
KLA11700 OSI vulnerability in Microsoft products (ESU)
An Information disclosure vulnerability was found in Microsoft Extended Security Updates. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2019-1125 Related products Microsoft-Windows Microsoft-Windows-Server Microsoft-Windows-Server-2012...
KLA11529 Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability via specially crafted application to obtain sensitive information. Original advisories CVE-2019-1125 Related products Microsoft-Windows CVE list CVE-2019-1125 warning KB list...
This Week in Security News: Ransomware Campaigns and Cryptocurrency Miners
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about three different ransomware campaigns that caused havoc in different public sectors. Also, read how threat actors are infecting...
Microsoft Windows DHCP Server Remote Code Execution Vulnerability (CNVD-2019-25949)
Microsoft Windows Server is a set of server operating systems from the American company Microsoft Microsoft. A remote code execution vulnerability exists in the DHCP service in Microsoft Windows Server. An attacker could exploit this vulnerability to run arbitrary code on the DHCP failover server...
SilverSHielD 6.x - Local Privilege Escalation
SilverSHielD 6.x - Local Privilege Escalation This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework Exploit Title: extenua SilverSHielD 6.x local priviledge escalation Google Dork: na Date: 31 Jul 2019 Exploit Author: Ian...
The vulnerability of the DHCP server service in Windows Server operating systems allows a perpetrator to cause a service failure or execute arbitrary code.
The vulnerability of the DHCP server service for Windows Server lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code by sending a specially crafted packet to...
Central Security Project: OS Command Injection in Nexus Repository Manager 2.x
Maven artifact groupId: org.sonatype.nexus.plugins artifactId: nexus-yum-repository-plugin version: 2.14.9-01 Vulnerability Vulnerability Description The Nexus Yum Repository Plugin is vulnerable to Remote Code Execution. All instances using CommandLineExecutor.java with user-supplied data is...
Microsoft Windows - NtUserSetWindowFNID Win32k User Callback Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows NtUserSetWindowFNID Win32k User Callback', 'Description' = %q An elevation of privilege vulnerability exists in Windows when the Win32k...