2835 matches found
CVE-2023-38163
Windows Defender Attack Surface Reduction Security Feature Bypass...
CVE-2023-38163
Windows Defender Attack Surface Reduction Security Feature Bypass...
Security feature bypass
Windows Defender Attack Surface Reduction Security Feature Bypass...
Malware distributor Storm-0324 facilitates ransomware access
The threat actor that Microsoft tracks as Storm-0324 is a financially motivated group known to gain initial access using email-based initial infection vectors and then hand off access to compromised networks to other threat actors. These handoffs frequently lead to ransomware deployment. Beginnin...
CVE-2023-38163 Windows Defender Attack Surface Reduction Security Feature Bypass
...
CVE-2023-38163 Windows Defender Attack Surface Reduction Security Feature Bypass
...
CVE-2023-38163
CVE-2023-38163 corresponds to a Windows Defender Attack Surface Reduction (ASR) Security Feature bypass. The connected Nessus entry cites a bypass of the ASR blocking feature via a specially crafted file, enabling an attacker to defeat ASR protections after user interaction (attack vector: LOCAL,...
Windows Defender Attack Surface Reduction Security Feature Bypass
...
September 12, 2023—KB5030216 (OS Build 20348.1970)
None None...
PT-2023-5060 · Microsoft · Windows Defender
Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass existing security restrictions using a specially crafted file. Recommendations: At the moment,...
Microsoft Windows Defender Security Vulnerability
Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker exploiting the vulnerability could bypass certain features...
KLA60567 SB vulnerability in Microsoft System Center
A security feature bypass vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2023-38163 Related products Windows-Defender CVE list CVE-2023-38163 critical KB list Solution Install necessary...
WordPress Defender Security Plugin < 4.1.0 is vulnerable to Bypass Vulnerability
Software Defender Security Type Plugin Vulnerable versions 4.1.0 Fixed in 4.1.0 OWASP Top 10 A1: Broken Access Control Classification Bypass Vulnerability CVE CVE-2023-5089 Patch priority Low CVSS severity Low 5.3 Developer WPMU DEV PSID e45ed857552b Credits Juan Pablo Gomez Postigo Required...
PT-2023-31704
Name of the Vulnerable Software and Affected Versions Defender Security WordPress plugin versions prior to 4.1.0 Description The issue allows an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin is enabled, due to the plugin not preventing...
Security Bulletin: Multiple vulnerabilities in IBM Storage Defender – Data Protect
Summary IBM Storage Defender – Data Protect is vulnerable and that can result in runtime errors, denial of service attacks, remote code execution, or remote access authentication bypass. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2018-17142 DESCRIPTION: Golang Go is...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 - WinRAR File Extension Spoofing Vulnerability...
AD_Enumeration_Hunt - Collection Of PowerShell Scripts And Commands That Can Be Used For Active Directory (AD) Penetration Testing And Security Assessment
Description Welcome to the AD Pentesting Toolkit! This repository contains a collection of PowerShell scripts and commands that can be used for Active Directory AD penetration testing and security assessment. The scripts cover various aspects of AD enumeration, user and group management, computer...
The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Microsoft Windows Defender operating system, which allows a hacker to increase their privileges
The vulnerability of Microsoft Windows Defender operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Security Updates for Windows Defender (August 2023)
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.23060.3001. It is, therefore, affected by a privilege escalation vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's...