CVE-2021-28817

The Windows Installation component of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The...

Mcafee McAfee Data Loss Prevention 后置链接漏洞

Mcafee McAfee Data Loss Prevention DLP is a data loss prevention suite from McAfee, Inc. that includes components such as McAfee DLP Monitor, McAfee DLP Endpoint, and provides event management and reporting, synchronization of local and cloud DLP policies, and more. A security vulnerability exist...

Code injection

git-bug before 0.7.2 has an Uncontrolled Search Path Element. It will execute git.bat from the current directory in certain PATH situations most often seen on Windows...

Vembu BDR 4.2.0.1 U1 Unquoted Service Path

Exploit Title: Vembu BDR 4.2.0.1 U1 - Multiple Unquoted Service Paths Date: 2020-11-6 Exploit Author: Mohammed Alshehri Vendor Homepage: https://www.vembu.com/ Software Link: https://sg-build-release.s3.amazonaws.com/BDRSuite/V420/4202020051312/VembuBDRBackupServerSetup4201U1GA.exe Version: Versi...

CVE-2021-26874

Windows Overlay Filter Elevation of Privilege Vulnerability...

CVE-2021-26887

An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...

Privilege escalation

Windows Win32k Elevation of Privilege Vulnerability...

The vulnerability of the Fortinet FortiClient for Windows security tool lies in the rigid encoding of registration data, which allows an intruder to gain unauthorized access to the protected information.

The vulnerability of the Fortinet FortiClient for Windows security tool is related to the rigid encoding of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the protected information...

Exploit for Use After Free in Microsoft

CVE-2019-0708-poc CVE-2019-0708 远程代码执行漏洞批量检测 3389hosts为待检测IP地址清单，一行一个 pool = ThreadPool10 为自定义扫描线程 注意 Windows python3环境 使用 1. 编辑3389hosts，将待检测的IP地址写入文件，一行一个 2. 命令行切换到代码所在的目录，运行python cve-2019-0708.py...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 fo...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. The following products and editions are affected: Windows 10 Version 2004 for ARM64-based Systems,Windows 10 Version...

The vulnerability of Cisco Webex Meetings Desktop App and Webex Productivity Tools, software for web conferencing solutions from Cisco Webex Meetings, on Windows operating systems, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Cisco Webex Meetings Desktop App and Webex Productivity Tools software for web conferencing on Windows operating systems is related to errors in handling requests. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by...

The vulnerability of the DxgkDdiEscape function in NVIDIA GeForce, Quadro, NVS, and Tesla graphics drivers for Windows operating systems allows a hacker to cause system failures, gain unauthorized privileges, execute arbitrary code, or obtain unauthorized access to protected information.

The vulnerability of the DxgkDdiEscape function in NVIDIA GeForce, Quadro, NVS, and Tesla graphics drivers for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to cause system failures, gain elevate...

CVE-2021-24084

Windows Mobile Device Management Information Disclosure Vulnerability...

CVE-2021-24074

Windows TCP/IP Remote Code Execution Vulnerability...

CVE-2021-24080

Windows Trust Verification API Denial of Service Vulnerability...

CVE-2020-17162

Microsoft Windows Security Feature Bypass Vulnerability...

CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability

...

Microsoft Windows Security Feature Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a security signature vulnerability that arises from a lack of security measures such as authentication, access control, and privilege management in a...

Memory Corruption Vulnerability in QQ Video for Windows

QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in QQ Video for Windows, which can be exploited by attackers to cause the program to crash...