CVE-2020-36233

CVE-2020-36233 affects Atlassian Bitbucket on Windows where the Windows Installer creates weak ACLs in the installation directory, enabling local privilege escalation. Affected Bitbucket Server/Data Center installers include all versions prior to 6.10.9, 7.x prior to 7.6.4, and 7.7.0 up to 7.10.0...

CVE-2020-36233

The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory...

12-Year-Old vulnerability in Windows Defender risked 1 billion devices

By Saad Rajpoot A vulnerability was identified in Windows Defender, an anti-malware component of Microsoft Windows that comes pre-installed with Windows. This is a post from HackRead.com Read the original post: 12-Year-Old vulnerability in Windows Defender risked 1 billion devices...

Microsoft Windows TCP/IP Remote Code Execution Vulnerability

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. A remote code execution vulnerability exists in Microsoft Windows TCP/IP, which can be triggered by constructing special IP source routing packets, and an attacker who...

Microsoft Windows TCP/IP Denial of Service Vulnerability

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. A denial of service vulnerability exists in Microsoft Windows TCP/IP, which can be triggered by an attacker by sending multiple crafted IPv6 packets multiple IP packet...

Microsoft Windows Camera Codec Pack Image Processing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the camera codec...

Microsoft Windows Device Management Enrollment Service Directory Junction Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Microsoft Windows Multiple Vulnerabilities (KB4601315)

This host is missing a critical security update according to Microsoft KB4601315 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4601345)

This host is missing a critical security update according to Microsoft KB4601345 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows wab32 WAB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of W...

Microsoft Windows Multiple Vulnerabilities (KB4601384)

This host is missing a critical security update according to Microsoft KB4601384 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4601318)

This host is missing a critical security update according to Microsoft KB4601318 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Camera Codec Pack Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Windows Multiple Vulnerabilities (KB4601348)

This host is missing a critical security update according to Microsoft KB4601348 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4601347)

This host is missing a critical security update according to Microsoft KB4601347 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ATTPwn - Tool Designed To Emulate Adversaries

ATTPwn is a computer security tool designed to emulate adversaries. The tool aims to bring emulation of a real threat into closer contact with implementations based on the techniques and tactics from the MITRE ATT&CK framework. The goal is to simulate how a threat works in an intrusion scenario,...

Microsoft Windows TCP/IP 安全漏洞

The Microsoft Windows operating system is a set of operating systems developed by Microsoft Corporation in the United States. A remote code execution vulnerability exists in Microsoft Windows TCP/IP, which can be triggered by constructing special IP source routing packets, and an attacker who...

Microsoft Win32k Elevation of Privilege (CVE-2021-1732)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

KLA12071 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A denial of...

Microsoft Windows 缓冲区错误漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation U.S. Microsoft Windows is an operating system for personal devices Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in the Microsoft Windows/Windows Server...