TCQ Unquoted Service Path

Exploit Title: TCQ - 'ITeCProteccioAppServer.exe' Unquoted Service Path Discovery by: Edgar Carrillo Egea - https://twitter.com/ecarrilloeg Discovery Date: 2022-04-25 Vendor Homepage: https://itec.es/programas/ Vulnerability Type: Unquoted Service Path Privilege Escalation Tested on OS: Microsoft...

Microsoft Windows Multiple Vulnerabilities (KB5014011)

This host is missing an important security update according to Microsoft KB5014011 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5013952)

This host is missing an important security update according to Microsoft KB5013952 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5013963)

This host is missing an important security update according to Microsoft KB5013963 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

TCQ - ITeCProteccioAppServer.exe - Unquoted Service Path

Exploit Title: TCQ - 'ITeCProteccioAppServer.exe' Unquoted Service Path Discovery by: Edgar Carrillo Egea - https://twitter.com/ecarrilloeg Discovery Date: 2022-04-25 Vendor Homepage: https://itec.es/programas/ Vulnerability Type: Unquoted Service Path Privilege Escalation Tested on OS: Microsoft...

UDisk Monitor Z5 Phone - 'MonServiceUDisk.exe' Unquoted Service Path

Exploit Title: UDisk Monitor Z5 Phone - 'MonServiceUDisk.exe' Unquoted Service Path Discovery by: Edgar Carrillo Egea // https://twitter.com/ecarrilloeg Discovery Date: 2022-04-24 Vendor Homepage: https://www.zte.com.cn/global/ Tested Version: 2.0.3.0 Vulnerability Type: Unquoted Service Path...

Microsoft Windows Multiple Vulnerabilities (KB5013945)

This host is missing an important security update according to Microsoft KB5013945 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft .NET Framework DoS Vulnerability (KB5013872)

This host is missing an important security update according to Microsoft KB5013872 Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2022-29131

Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability...

Remote code execution

Microsoft Windows Media Foundation Remote Code Execution Vulnerability...

CVE-2022-29105 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation. Microsoft Windows LDAP is vulnerable to remote code execution, which can be exploited by attackers to execute code on the target host...

Microsoft Windows Print Spooler Service Directory Traversal Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Pri...

PT-2022-2468 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows NTFS file system, which can allow an attacker to obtain unauthorized access to protected information. Thi...

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation. Microsoft Windows LDAP is vulnerable to remote code execution, which can be exploited by attackers to execute code on the target host...

Microsoft Windows Print Spooler Components 信息泄露漏洞

An information disclosure vulnerability exists in Microsoft Windows Print Spooler Components, a print backend processor component of Microsoft Corporation. The vulnerability stems from a configuration or other error in the operation of the network system or product. An attacker could use this...

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation. Microsoft Windows LDAP is vulnerable to remote code execution, which can be exploited by attackers to execute code on the target host...

Microsoft Lightweight Directory Access Protocol 输入验证错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation. Microsoft Windows LDAP is vulnerable to remote code execution, which can be exploited by attackers to execute code on the target host...

Microsoft Windows OpenType Font File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PT-2022-2651 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass the authentication process. This security-feature bypass vulnerability can affect the system...