2783 matches found
Malicious IIS extensions quietly open persistent backdoors into servers
Attackers are increasingly leveraging Internet Information Services IIS extensions as covert backdoors into servers, which hide deep in target environments and provide a durable persistence mechanism for attackers. While prior research has been published on specific incidents and variants, little...
STIG V-218773 - Recycling IIS App Pools on Storefront Servers
Address STIGV-218773 compatibility with Citrix Storefront vis a vis of the virtual memory an application pool uses...
CVE-2022-30209
Windows IIS Server Elevation of Privilege Vulnerability...
Privilege escalation
Windows IIS Server Elevation of Privilege Vulnerability...
Denial of service
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability...
CVE-2022-30209
Technical details (affected products, exploit vector, root cause, and remediation) are not provided in the supplied documents. Monitor for updates from official sources.
CVE-2022-30209 Windows IIS Server Elevation of Privilege Vulnerability
...
CVE-2022-30209 Windows IIS Server Elevation of Privilege Vulnerability
...
CVE-2022-22040
Technical details about CVE-2022-22040 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact specifics, and fixes before taking action.
CVE-2022-22040 Internet Information Services Dynamic Compression Module Denial of Service Vulnerability
...
CVE-2022-22025
CVE-2022-22025 refers to a Denial of Service vulnerability in the Windows Internet Information Services Cachuri Module. The available document describes it as a module DoS issue but does not provide details on affected product versions, root cause, attack vector, or fix. Exploitation details are ...
CVE-2022-22025 Windows Internet Information Services Cachuri Module Denial of Service Vulnerability
...
Internet Information Services Dynamic Compression Module Denial of Service Vulnerability
...
Windows Internet Information Services Cachuri Module Denial of Service Vulnerability
...
Windows IIS Server Elevation of Privilege Vulnerability
...
PT-2022-3740 · Microsoft · Windows Iis Server +1
Name of the Vulnerable Software and Affected Versions: Windows IIS Server affected versions not specified Description: The issue is related to insufficient access control in the Windows IIS Server, which can be exploited by a remote attacker to elevate their privileges. This can affect the system...
KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...
New 'SessionManager' Backdoor Targeting Microsoft IIS Servers in the Wild
A newly discovered malware has been put to use in the wild at least since March 2021 to backdoor Microsoft Exchange servers belonging to a wide range of entities worldwide, with infections lingering in 20 organizations as of June 2022. Dubbed SessionManager, the malicious tool masquerades as a...
The SessionManager IIS backdoor
Following on from our earlier Owowa discovery, we continued to hunt for more backdoors potentially set up as malicious modules within IIS, a popular web server edited by Microsoft. And we didnt come back empty-handed… In 2021, we noticed a trend among several threat actors for deploying a backdoo...
Real Player v.20.0.8.310 G2 Control - DoGoToURL() Remote Code Execution Exploit
Exploit Title: Real Player v.20.0.8.310 G2 Control - 'DoGoToURL' Remote Code Execution RCE Exploit Author: Eduardo Braun Prado Vendor Homepage: http://real.com/ Software Link: http://real.com/ Version: v.20.0.8.310 Tested on: Windows 7, 8.1, 10 CVE : N/A Full PoC:...