Nasty Windows Printer Driver Vulnerability

From SentinelLabs, a critical vulnerability in HP printer drivers: Researchers have released technical details on a high-severity privilege-escalation flaw in HP printer drivers also used by Samsung and Xerox, which impacts hundreds of millions of Windows machines. If exploited, cyberattackers...

CVE-2021-36934 Windows Elevation of Privilege Vulnerability

...

Vulnerability discovered in Microsoft Windows

Researchers have discovered a vulnerability in Microsoft Windows 10 build 1809 and later. A local, authenticated malicious person could exploit the vulnerability to read the local SAM database and execute arbitrary code with SYSTEM privileges. -= Microsoft =- Microsoft has not yet made updates...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

This is a proof-of-concept PoC exploit for CVE-2020-0796, also known as SMBGhost, a pre-authentication remote code execution vulnerability in Microsoft Windows. The exploit is written in Python and uses the SMB protocol to target vulnerable Windows systems. The exploit code is organized into...

Microsoft Edge 安全特征问题漏洞

Google Chrome is a web browser from the US company Google. Versions of Google Chrome prior to 92.0.4515.107 have a security vulnerability in Windows. An attacker could exploit this vulnerability to bypass security restrictions...

CVE-2021-34454

Windows Remote Access Connection Manager Information Disclosure Vulnerability...

CVE-2021-34440

GDI+ Information Disclosure Vulnerability...

CVE-2021-34690

iDrive RemotePC before 7.6.48 on Windows allows authentication bypass. A remote and unauthenticated attacker can bypass cloud authentication to connect and control a system via TCP port 5970 and 5980...

Idrive IDrive 安全漏洞

Idrive IDrive is a suite of cloud backup and cloud storage service solutions from IDrive USA. A security vulnerability exists in iDrive RemotePC, which stems from the iDrive RemotePC Allowed Elevation of Privilege on Windows prior to 7.6.48. An attacker can exploit the vulnerability to force...

Zscaler Client Connector 缓冲区错误漏洞

Zscaler Client Connector is an application for zscaler. An application installed on an appliance that ensures that Internet traffic and access to an organization's internal applications is secure and compliant with the organization's policies, even when not on the corporate network.A security...

CVE-2021-34507

Windows Remote Assistance Information Disclosure Vulnerability...

CVE-2021-33782

Windows Authenticode Spoofing Vulnerability...

CVE-2021-33764

Windows Key Distribution Center Information Disclosure Vulnerability...

CVE-2021-34499

Windows DNS Server Denial of Service Vulnerability...

CVE-2021-33786

Windows LSA Security Feature Bypass Vulnerability...

PT-2021-4850 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Remote Access Connection Manager service of the Microsoft Windows operating system. This vulnerability can be exploite...

dandavison delta 代码问题漏洞

dandavison delta is an open source viewer of git and diff output. A security vulnerability exists in dandavison delta on Windows prior to 0.8.3, which stems from dandavison delta resolving the pathname of an executable file to a relative path in the current directory...

PT-2021-5180 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the Remote Access Connection Manager RASMan service in Microsoft Windows and involves insecure privilege management. It allows an attacker to elevate...

Microsoft Windows 安全特征问题漏洞

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. Microsoft Windows HTML Platform is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 20H2 for ARM64-based Systems,Windows 10 for 32-bit Systems,Windows 10...

PT-2021-15277 · Node.Js · Node.Js

Name of the Vulnerable Software and Affected Versions: Node.js versions prior to 16.4.1 Node.js versions prior to 14.17.2 Node.js versions prior to 12.22.2 Description: The issue allows for local privilege escalation attacks under certain conditions on Windows platforms due to improper...