Extreme Office 2019 For Windows Has Command Execution Vulnerability

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A command execution vulnerability exists in Extreme Office 2019 For Windows. An attacker can exploit this vulnerability to gain control of the server...

Microsoft Windows rdp Information Disclosure Vulnerability

Microsoft Windows rdp is an application for connecting to remote Windows desktops from Microsoft USA. An information disclosure vulnerability exists in Microsoft Windows rdp, which can be exploited by an attacker to further compromise a user's system by connecting to the target system using Remot...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of Remote Desktop Services RDS for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created application...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Remote Desktop Services RDS for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2020-4278 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in file signature verification. It allows an attacker to bypass security features and load improperly signed files. In an attack scenario, an attacker could...

PT-2020-4337 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: An elevation of privilege issue exists due to improper handling of reparse points by Microsoft Windows. This could allow an attacker to overwrite or delete targeted files that...

CVE-2020-26894

Affected software: LiveCode v9.6.1 on Windows. Vulnerability: local privilege escalation via a malicious cmd.exe placed in the vulnerable app’s folder; when using LiveCode's shell(), the app may search that folder and execute cmd.exe. Root cause: insecure handling of an external executable in the...

The vulnerability of the Universal Plug and Play (UPnP) service in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code with elevated privileges...

MS17-010

This repository is for public analysis of the MS17-010 vulnerability. The vulnerability is related to the SMB Server Message Block protocol and affects Windows operating systems. The repository contains various PoCs Proof of Concepts and exploits for different versions of Windows, including Windo...

The vulnerability of the win32k component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Zerologon Patches Roll Out Beyond Microsoft

UPDATE The “perfect” Windows vulnerability known as the Zerologon bug is getting a patch assist from two non-Microsoft sources, as they strive to fill in the gaps that the official fix doesn’t address. They roll out as Microsoft announced that it is tracking active exploitation in the wild. “We...

The vulnerability of the StartTileData.dll library in the Windows operating system, related to errors in memory object handling, allows attackers to disclose protected information.

The vulnerability of the StartTileData.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

The vulnerability of the Active Directory integrated DNS (ADIDNS) component in Microsoft Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Active Directory Integrated DNS ADIDNS component in Microsoft Windows operating systems is related to incorrect processing of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Microsoft Store Runtime component for Microsoft Windows operating systems, which allows a perpetrator to enhance their privileges

The vulnerability of the Microsoft Store Runtime operating system components in Microsoft Windows is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the storvsp.sys component of the Hyper-V hardware virtualization system in the Windows operating system allows a perpetrator to increase their privileges.

The vulnerability of the storvsp.sys component of the Hyper-V hardware virtualization technology in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Microsoft Component Object Model (COM) in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Component Object Model COM in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Camera Codec Pack component of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Camera Codec Pack component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

The vulnerability of the ssdpsrv.dll library in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the ssdpsrv.dll library in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53170)

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker to cause an application crash via a specially crafted PDF file...