Input validation

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an attacker to cause a process crash resulting in a Denial of service DoS condition for the player application on an affected system. The vulnerability exists due to insufficient...

Input validation

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an attacker to cause a process crash resulting in a Denial of service DoS condition for the player application on an affected system. The vulnerability exists due to insufficient...

Input validation

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an attacker to cause a process crash resulting in a Denial of service DoS condition for the player application on an affected system. The vulnerability exists due to insufficient...

CVE-2020-3322 Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerability

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an attacker to cause a process crash resulting in a Denial of service DoS condition for the player application on an affected system. The vulnerability exists due to insufficient...

CVE-2020-3322

Cisco Webex Network Recording Player and Cisco Webex Player for Windows are affected by an input-validation vulnerability in ARF/WRF recordings. The issue allows an attacker to cause the player to crash when opening a malicious ARF/WRF file, resulting in DoS on the affected system. The provided c...

CVE-2020-3322 Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerability

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an attacker to cause a process crash resulting in a Denial of service DoS condition for the player application on an affected system. The vulnerability exists due to insufficient...

CVE-2020-3321

Cisco Webex Network Recording Player and Cisco Webex Player for Windows are affected by CVE-2020-3321. The vulnerability stems from insufficient validation of elements inside Webex recordings stored in ARF or WRF formats, allowing a crafted file to crash the Webex player and cause a DoS on the ho...

CVE-2020-3319

CVE-2020-3319 affects Cisco Webex Network Recording Player and Cisco Webex Player for Windows. The issue is an input/element validation error in Webex ARF/WRF recordings, which can cause the Webex player to crash when viewing a malicious file, leading to a DoS. Affected releases are Webex Network...

CVE-2020-3319 Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerability

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an attacker to cause a process crash resulting in a Denial of service DoS condition for the player application on an affected system. The vulnerability exists due to insufficient...

Microsoft Windows - (SMBGhost) Remote Code Execution Exploit

!/usr/bin/env python ''' EDB Note Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/48537.zip SMBGhostRCEPoC RCE PoC for CVE-2020-0796 "SMBGhost" For demonstration purposes only! Only use this a reference. Seriously. This has not been tested outside of m...

Microsoft Windows - 'SMBGhost' Remote Code Execution

!/usr/bin/env python ''' EDB Note Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/48537.zip SMBGhostRCEPoC RCE PoC for CVE-2020-0796 "SMBGhost" For demonstration purposes only! Only use this a reference. Seriously. This has not been tested outside of my...

The zero-day exploits of Operation WizardOpium

Back in October 2019 we detected a classic watering-hole attack on a North Korea-related news site that exploited a chain of Google Chrome and Microsoft Windows zero-days. While we've already published blog posts briefly describing this operation available here and here, in this blog post we'd li...

AutoRDPwn v5.1 - The Shadow Attack Framework

AutoRDPwn is a post-exploitation framework created in Powershell, designed primarily to automate the Shadow attack on Microsoft Windows computers. This vulnerability listed as a feature by Microsoft allows a remote attacker to view his victim's desktop without his consent, and even control it on...

Microsoft Windows Information Disclosure(CVE-2019-1334)

An information disclosure vulnerability exists in microsoft windows . Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Windows Information Disclosure(CVE-2019-1227)

An information disclosure vulnerability exists in microsoft windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

CVE-2020-1113

A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. An attacker could then install programs...

Security feature bypass

A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'...

CVE-2020-1113 Windows Task Scheduler Security Feature Bypass Vulnerability

...

CVE-2020-1079 Microsoft Windows Elevation of Privilege Vulnerability

...

Microsoft Windows Information Disclosure(CVE-2019-1094)

An information disclosure vulnerability exists in microsoft windows . Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...