283 matches found
Windows Docker Information Disclosure Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability (CNVD-2021-24027)
Raw Image Extension is an image extension application developed by Microsoft that allows you to view images in Raw format. A remote code execution vulnerability exists in versions prior to Raw Image Extension 1.0.32861.0. An attacker can exploit this vulnerability to achieve remote code execution...
Exploit for CVE-2020-16898
CVE-2020-16898 PoC Ba...
Election Systems Under Attack via Microsoft Zerologon Exploits
U.S. government officials have warned that advanced persistent threat actors APTs are now leveraging Microsoft’s severe privilege-escalation flaw, dubbed “Zerologon,” to target elections support systems. Days after Microsoft sounded the alarm that an Iranian nation-state actor was actively...
Zerologon Attacks Against Microsoft DCs Snowball in a Week
A spike in exploitation attempts against the Microsoft vulnerability CVE-2020-1472, known as the Zerologon bug, continues to plague businesses. That’s according to researchers from Cisco Talos, who warned that cybercriminals are redoubling their efforts to trigger the elevation-of-privilege bug i...
PT-2020-3899 · Microsoft · Windows Shell +1
Name of the Vulnerable Software and Affected Versions: Windows Shell affected versions not specified Description: The issue is related to the improper handling of objects in memory by the Shell infrastructure component, allowing an attacker to potentially run processes in an elevated context. To...
CISA Releases Emergency Directive on Critical Microsoft Vulnerability
The Cybersecurity and Infrastructure Security Agency CISA has released Emergency Directive 20-03 addressing a critical vulnerability—CVE-2020-1350—affecting all versions of Windows Server with the Domain Name System DNS role enabled. A remote attacker could exploit this vulnerability to take...
Exploit for Improper Resource Shutdown or Release in Microsoft
Web-Security-Note Record some common Web security sites 由于平常读过的文章以及遇到的比较好的开源项目都被渐渐遗忘了，所以利用这个项目来记录一下，以便查阅。 目录： - CTF - Online-Tools - 漏洞环境 - 信息搜集 - 工具 - 面经 - BypassWAF - WEB安全 - 漏洞挖掘 - 渗透测试 - 内网渗透 - 扫描器开发 - 开发 - 运维 CTF + CTF Time + Pwnhub + CTF论剑场 + 南京邮电大学CTF平台 + Whale CTF + JarvisOJ + Hackme CTF ...
Exploit for CVE-2020-1015
CVE-2020-1015 PoC for CVE-2020-1015 More detail available he...
Microsoft Windows Graphics Device Interface Remote Code Execution Vulnerability (CNVD-2020-34941)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. A remote co...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
CVE-2020-0796-LPE SMBGHOST...
A week in security (March 2 – 8)
Last week on Malwarebytes Labs, we fired up part 1 of our series on child identity theft, asked how well law enforcement can deal with cybercriminals, and took a trip down the memory lane of moral panic. We also looked at the positives and negatives of VPNs and examined our own progress in the...
Don’t Let the Vulnera-Bullies Win. Use our free tool to see if you are patched against Vulnerability CVE-2020-0601
So much for a quiet January! By now you must have heard about the new Microsoft® vulnerability CVE-2020-0601, first disclosed by the NSA making it the first Windows bug publicly attributed to the National Security Agency. This vulnerability is found in a cryptographic component that has a range o...
CVE-2019-1083
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of Service Vulnerability'...
CVE-2019-0880
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'...
Talos releases coverage for 'wormable' Microsoft vulnerability
Last night, Cisco Talos released the latest SNORT® rule update, which includes coverage for the critical Microsoft vulnerability CVE-2019-0708. The company disclosed this vulnerability last week as part of its monthly security update. This particular bug exists in Remote Desktop Services — former...
Exploit for Use After Free in Microsoft
CVE-2019-0708-PoC-Hitting-Path Really Really Bad, don't judg...
Exploit for Use After Free in Microsoft
CVE-2019-0708...