The vulnerability of the Win32k component in Microsoft Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Microsoft Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Command Execution Vulnerability in XAMPP for Windows

XAMPP is a free open source cross-platform Web server solution stack package developed by Apache Friends. A command execution vulnerability exists in XAMPP for Windows. An attacker can use this vulnerability to execute arbitrary commands leading to elevation of privilege...

CVE-2021-21155

Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

PT-2021-15585 · Mcafee · Mcafee Endpoint Security (Ens) For Windows

Name of the Vulnerable Software and Affected Versions: McAfee Endpoint Security ENS for Windows versions prior to 10.7.0 February 2021 Update Description: A Null Pointer Dereference issue allows a local administrator to cause Windows to crash via a specific system call which is not handled...

Windows Remote Procedure Call Information Disclosure Vulnerability

...

Microsoft Windows PKU2U 安全特征问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is a set of operating systems for personal devices, and Microsoft Windows Server is a set of server operating systems. Microsoft Windows/Windows Server PKU2U has an elevation of...

PT-2021-2077

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the implementation of PFX encryption technology in Microsoft Windows, specifically concerning the lack of protection for service data. This could allow an...

PT-2021-15664 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: A vulnerability allows attackers to obtain sensitive information and affect the system. Recommendations: At the moment, there is no information about a newer version that contains...

PT-2021-2075

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Windows 10 versions prior to February 2021 Description A memory buffer overflow and type confusion issue exists in the Win32k component of the Windows kernel. During the execution of the...

PT-2021-2028

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the PKU2U authentication protocol in Windows operating systems, specifically concerning access control weaknesses. Exploitation of this issue m...

PT-2021-2071 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Remote Procedure Call RPC technology in Microsoft Windows operating systems, specifically due to a lack of protection for service data. Thi...

CVE-2021-25276

In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files that include users' password hashes that is world readable and writable. An unprivileged Windows user having access to the server's filesystem can add an FTP user by copying a valid profile file to thi...

CVE-2020-35152

Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process running with non-administrative privileges can become an administrator by abusing the unquoted service path issue. Since version 1.2.2695.1, the vulnerability was fixed by adding...

DH2i DxEnterprise and DxOdyssey Path Traversal Vulnerability

DH2i DxEnterprise and DH2i DxOdyssey are both products of DH2i, Inc.DH2i DxEnterprise is a Docker-based application that provides container management, database management, and other functionality for a variety of platforms.DH2i DxOdyssey is a Vpn software for secure connectivity. A path traversa...

VulnCheck KEV: CVE-2020-8269

An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

This is a proof-of-concept PoC exploit for CVE-2020-0796, also known as SMBGhost, a pre-authentication remote code execution vulnerability in Windows SMBv3. The exploit is written in Python and uses the SMB protocol to inject shellcode into the Windows kernel. The shellcode is generated from a...

Exploit for CVE-2020-16898

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP远程代码执行漏洞 EXP&POC 复现 forforever：https://www.cnblogs.com/forforever/p/13846077.html poc CVE-2020-16898Checker-poc 命令： 管理员启动powershell/CMD Powershell.exe -ExecutionPolicy UnRestricted -File .\CVE-2020-16898-poc.ps1 exp cve-2020-16898-exp2...

Exploit for CVE-2020-17008

CVE-2020-17008 splWOW64 Elevation of Privilege C:\Windows\splwow64.exe Poc From: https://bugs.chromium.org/p/project-zero/issues/detail?id=2096 0x01 set splwow64poc.exe Low cd splwow64poc\x64\Release icacls splwow64poc.exe /setintegritylevel L /setintegritylevel CIOI级别将完整性 ACE 显式...

Ali Want Want windows new version suffers from dll hijacking vulnerability (CNVD-2021-12700)

Aliwangwang is a personal transaction communication software customized for Taobao, which facilitates real-time communication between buyers and sellers in the transaction process. A dll hijacking vulnerability exists in the new version of Ali Want Want for Windows. Attackers can use the...

The vulnerability of the Microsoft DTV-DVD Video decoder for the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft DTV-DVD video decoder for the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...