1853 matches found
July 11, 2017—KB4025336 (Monthly Rollup)
None None...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...
Siemens SIMATIC Logon
CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SIMATIC Logon Vulnerability: Out-of-Bounds Write AFFECTED PRODUCTS Siemens reports that the vulnerability affects the following SIMATIC Logon products: SIMATIC Logon: All versions prior to V1.6 IMPA...
swog.org XSS vulnerability
Open Bug Bounty ID: OBB-259213 Description| Value ---|--- Affected Website:| swog.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
icms.cc-courts.org XSS vulnerability
Vulnerable URL: http://icms.cc-courts.org/iotw/logon.asp?forcelogon=Y=Default.asp====1"...
Creating a Mandatory Profile Recipe
Windows profiles include the user registry and the file system under c:\users%username%. Windows profiles are where application vendors store setting information particular to a user. What is stored here can be anything the vendors need to store for their applications to work. Many application ru...
Unidesk Recipe for NP Desktop Logon Time Optimization v3
One very popular use case for VDI is for kiosk or lab machines. Uses for these types of desktops include classroom labs, library access and general computing in schools and corporations. Architects and Administrators of these types of use cases generally want to be able to define default...
June 27, 2017—KB4022716 (OS Build 15063.447)
None None...
CVE-2017-3631
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful...
recicerts.ie XSS vulnerability
Vulnerable URL: http://www.recicerts.ie/asp/Logon/barred.asp?contractor=1/-///'/"//--...
VulnCheck KEV: CVE-2017-3622
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Common Desktop Environment CDE. The supported version that is affected is 10. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes...
Microsoft Graphics Component Elevation of Privilege Vulnerability
An Elevation of Privilege vulnerability exists when the Windows Graphics component improperly initializes contents in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; o...
DirectX Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with...
wwwapps3.tc.gc.ca XSS vulnerability
Vulnerable URL: http://wwwapps3.tc.gc.ca/Saf-Sec-Sur/2/CAWIS-SWIMN/logon-cs0101.asp?lang=1/-///'/"//--...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...
WMI Event Subscription Persistence
This module will create a permanent WMI event subscription to achieve file-less persistence using one of five methods. The EVENT method will create an event filter that will query the event log for an EVENTIDTRIGGER default: failed logon request id 4625 that also contains a specified...
May 25, 2017—KB4020102 (OS Build 15063.332)
None None...
Conexant Systems MicTray64 Information Disclosure Vulnerability
Conexant Systems MicTray64 is an application that Conexant Systems USA installs with the Conexant Audio Driver package and registers as a Microsoft Scheduled Task to run after each user logs on. The program monitors all keystrokes taken by the user to capture and respond to functions such as...
Average Logon Duration Is Not Available In Citrix Director
When an administrator logs in Citrix Director and goes to "trends" to look for Average Logon Duration, the information is not available. Logon Duration in MonitorData.Session Table in Monitoring Database also shows "Null" value for "Logon Duration" Restarting the Monitoring Service on Delivery...