20 matches found
CVE-2013-3900
This repository does not have a README...
CVE-2013-3900-PowerShell-PoC
CVE-2013-3900-PowerShell-PoC This PoC is provided for educational and research purposes only. The author takes no responsibility for misuse or damage caused by this code. This PowerShell script is a testing tool for simulating the attack described in CVE-2013-3900. CVE-2013-3900 concerns the...
cve-2013-3900-remediation-report
Remediation Report: CVE-2013-3900 – WinVerifyTrust Vulnerability on Windows Server 2019 Azure VM Overview During a recent authenticated vulnerability assessment conducted using Tenable Nessus, CVE-2013-3900 was detected on a Windows Server 2019 virtual machine hosted in Microsoft Azure. This scan...
CVE-2013-3900_Remediation_PowerShell
CVE-2013-3900RemediationPowerShell Script to make changes on registry to fix CVE-2013-3900. It comes with an option to undo in case it breaks something on your environment. Steps Download the script, run it with Admin Privileges, reboot the machine...
Remediating-CVE-2013-3900-EnableCertPaddingCheck-
修復レポート: CVE-2013-3900 on Windows Server 2019 Azure VM CVE-2013-3900 EnableCertPaddingCheck の修復 Tenable/Nessus を使用した認証済み脆弱性スキャン中に、Microsoft Azure でホストされている Windows Server 2019 Datacenter インスタンスで CVE-2013-3900 を特定しました。スキャンでは有効な管理資格情報を使用して詳細なチェックが実行され、OS レベルでこの脆弱性が存在することが確認されました。 CVE-2013-3900 は...
CVE-2013-3900
This repository does not have a README...
cve-2013-3900-winverifytrust-mitigation
CVE-2013-3900 Mitigation WinVerifyTrust / EnableCertPaddingCheck This repository contains a PowerShell remediation + verification script that addresses Tenable/Nessus finding: Plugin ID: 166555 Name: WinVerifyTrust Signature Validation CVE-2013-3900 Mitigation EnableCertPaddingCheck The script...
CVE-2013-3900-WinTrustVerify
Windows-Cert-Padding-Check...
CVE-2013-3900-Remediation-Script
root@kitploit: CVE-2013-3900 Remediation Script Define registry paths for both 32-bit and 64-bit configurations $regPaths = @ "HKLM:\Software\Microsoft\Cryptography\Wintrust\Config", "HKLM:\Software\Wow6432Node\Microsoft\Cryptography\Wintrust\Config" Function to add or update the registry key...
vulnerability-remediation-cve-2013-3900
🛡️ Remediation of CVE-2013-3900: WinVerifyTrust Signature Validation 📝 Project Overview This project demonstrates a real-world Vulnerability Management Workflow. Using an Azure VM, I hunted down a high-severity signature validation flaw, confirmed it manually via PowerShell, and deployed a...
nessus-vulnerability-scanning-lab
Nessus Vulnerability Scanning Lab — Azure Full vulnerability management lifecycle — scan, find, fix, verify — executed against my live Azure Active Directory lab environment using a dedicated, Terraform-deployed Nessus scanner. What This Lab Demonstrates I deployed a dedicated Ubuntu 24.04 scanne...
vulnerability-CVE-2013-3900
This repository does not have a README...
WinVerifyTrust Signature Validation Vulnerability
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
KLA12432 RCE vulnerability in Microsoft Products (ESU)
Remote code execution vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2013-3900 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows...
CVE-2013-3900
creationtimestamp| type| source ---|---|--- 2021-11-23 11:27:03+00:00| published-proof-of-concept| https://t.me/cKure/8191 2022-01-05 12:37:10+00:00| seen| MISP/a8009d56-7dab-4b65-a6ee-3caf2773c960 2022-01-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=725 2023-06-10...
CVE-2013-3900
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
CVE-2013-3900
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
CVE-2013-3900 WinVerifyTrust Signature Validation Vulnerability
...
CVE-2013-3900
CVE-2013-3900 describes a remote code execution in the WinVerifyTrust Authenticode verification for PE files. An attacker could modify a signed executable to execute code without invalidating the signature, potentially gaining full control of the system. Microsoft republished this CVE in the Secu...
