Credential Access – Password Filter DLL

Microsoft has introduced password filters as a method for systems administrators to enforce password policies and change notification. Filters are used to validate new passwords… Continue reading - Credential Access - Password Filter DLL...

Cuvva: No Notification Sent When Email Is Changed.

We weren't sending notifications when a customer changed the email address on their account. This meant it was less likely the customer would notice if this happened maliciously. A simple best practise issue...

Microsoft IIS File Change Notification Local Privilege Escalation Vulnerability

Description Microsoft Internet Information Service IIS is prone to a local privilege-escalation vulnerability that occurs when handling file change notifications. A local attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue wil...

Microsoft Internet Information Services privilege escalation

Privilege escalation through file change notification. ASP files processing privilege escalation...