20 matches found
cve-2013-3900-remediation-report
修复报告：CVE-2013-3900 – Windows Server 2019（Azure VM）上的WinVerifyTrust漏洞 概述 在最近一次使用Tenable Nessus进行的经过身份验证的漏洞评估中，在托管于Microsoft Azure 的Windows Server 2019 虚拟机上检测到了CVE-2013-3900。此次扫描利用了管理员凭据，从而能够深入检查系统的配置和注册表设置。...
CVE-2013-3900_Remediation_PowerShell
CVE-2013-3900修复PowerShell 用于修改注册表以修复CVE-2013-3900的脚本。它提供了撤销选项，以防对您的环境造成影响。 步骤 下载脚本，以管理员权限运行，然后重启机器。...
Remediating-CVE-2013-3900-EnableCertPaddingCheck-
修复报告：Windows Server 2019（Azure 虚拟机）上的 CVE-2013-3900 修复 CVE-2013-3900（EnableCertPaddingCheck） 在使用 Tenable/ Nessus 进行经身份验证的漏洞扫描期间，我在托管于 Microsoft Azure 的 Windows Server 2019 Datacenter 实例上发现了 CVE-2013-3900。该扫描利用有效的管理凭据执行了深度检查，确认了此漏洞在操作系统层面的存在。 CVE-2013-3900 是一个 WinVerifyTrust...
CVE-2013-3900
此存储库没有 README。...
CVE-2013-3900
此存储库没有 README。...
nessus-vulnerability-scanning-lab
Laboratorio de Escaneo de Vulnerabilidades con Nessus — Azure Ciclo completo de gestión de vulnerabilidades: escanear, encontrar, corregir, verificar — ejecutado contra mi entorno de laboratorio de Azure Active Directory en vivo usando un escáner Nessus dedicado desplegado con Terraform. Qué...
CVE-2013-3900-WinTrustVerify
Windows-Cert-Padding-Check...
vulnerability-CVE-2013-3900
此存储库没有 README。...
cve-2013-3900-winverifytrust-mitigation
CVE-2013-3900 缓解措施 WinVerifyTrust / EnableCertPaddingCheck 本仓库包含一个 PowerShell 修复与验证脚本，用于解决 Tenable/Nessus 扫描发现的问题： 插件 ID： 166555 名称： WinVerifyTrust 签名验证 CVE-2013-3900 缓解措施 EnableCertPaddingCheck 该脚本通过设置以下注册表值来强制启用 WinVerifyTrust 证书填充检查： EnableCertPaddingCheck DWORD = 1 在 64 位系统上，扫描器要求该值同时在本机注册表路径...
CVE-2013-3900-Remediation-Script
CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key function...
vulnerability-remediation-cve-2013-3900
🛡️ CVE-2013-3900 修复：WinVerifyTrust 签名验证 📝 项目概述 本项目演示了一个真实的漏洞管理工作流程 。通过使用Azure VM，我追踪了一个高严重性的签名验证漏洞，通过PowerShell手动确认，并部署了基于注册表的修复措施，以加固系统防止未经授权的代码执行。 问题 Windows中的WinVerifyTrust 函数存在一个隐蔽漏洞（CVE-2013-3900）。攻击者可以将恶意代码“搭便车”到已签名的文件上而不会破坏数字签名。这意味着即使文件携带恶意代码，它也可能看起来是“可信的”，从而绕过安全检查。 🚨 发现 我首先在Azure...
CVE-2013-3900-PowerShell-PoC
CVE-2013-3900-PowerShell-PoC Este PoC se proporciona únicamente con fines educativos y de investigación. El autor no asume ninguna responsabilidad por el mal uso o los daños causados por este código. Este script de PowerShell es una herramienta de prueba para simular el ataque descrito en...
WinVerifyTrust Signature Validation Vulnerability
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
KLA12432 RCE vulnerability in Microsoft Products (ESU)
Remote code execution vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2013-3900 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows...
CVE-2013-3900
creationtimestamp| type| source ---|---|--- 2021-11-23 11:27:03+00:00| published-proof-of-concept| https://t.me/cKure/8191 2022-01-05 12:37:10+00:00| seen| MISP/a8009d56-7dab-4b65-a6ee-3caf2773c960 2022-01-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=725 2023-06-10...
CVE-2013-3900
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
CVE-2013-3900
CVE-2013-3900 describes a remote code execution in the WinVerifyTrust Authenticode verification for PE files. An attacker could modify a signed executable to execute code without invalidating the signature, potentially gaining full control of the system. Microsoft republished this CVE in the Secu...
CVE-2013-3900 WinVerifyTrust Signature Validation Vulnerability
...
CVE-2013-3900
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
