CVE-2018-6664 SB10233 - Data Loss Prevention (DLP) Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 - Application Protections Bypass vulnerability

Application Protections Bypass vulnerability in Microsoft Windows in McAfee Data Loss Prevention DLP Endpoint before 10.0.500 and DLP Endpoint before 11.0.400 allows authenticated users to bypass the product block action via a command-line utility...

Microsoft Windows: WPD Devices: Deny write access

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winwpddenywriteaccess.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for WPD Devices: Deny write access Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Microsoft Windows: CD and DVD: Deny write access

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincddvddenywriteaccess.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for CD and DVD: Deny write access Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program...

Microsoft Windows: CD and DVD: Deny read access

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincddvddenyreadaccess.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for CD and DVD: Deny read access Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program i...

Microsoft Windows - POP/MOV SS Privilege Escalation Exploit

Exploit for windows platform in category local exploits Demo exploitation of the POP SS vulnerability CVE-2018-8897, leading to unsigned code execution with kernel privilages. - KVA Shadowing should be disabled and the relevant security update should be uninstalled. - This may not work with certa...

Microsoft Windows: Disallow Autoplay for non-volume devices

This test checks the setting for policy OpenVAS Vulnerability Test $Id: windisallowautoplaynonvolumedevices.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Disallow Autoplay for non-volume devices Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows - POPMOV SS Privilege Escalation

Microsoft Windows - POPMOV SS Privilege Escalation Demo exploitation of the POP SS vulnerability CVE-2018-8897, leading to unsigned code execution with kernel privilages. - KVA Shadowing should be disabled and the relevant security update should be uninstalled. - This may not work with certain...

Epic Games Launcher 7.9.4-4058369 Insecure File Permissions

i? Epic Games Launcher 7.9.4-4058369 Insecure File Permissions Vendor: Epic Games, Inc. Product web page: https://www.epicgames.com Affected version: 7.9.4-4058369 7.9.3-4051644 7.9.2 7.9.1-4016505 7.8.0-3988049 7.7.0 Summary: Epic Games Launcher is a shareware desktop tool that allows you to buy...

Microsoft Windows - 'POP/MOV SS' Privilege Escalation

Demo exploitation of the POP SS vulnerability CVE-2018-8897, leading to unsigned code execution with kernel privilages. - KVA Shadowing should be disabled and the relevant security update should be uninstalled. - This may not work with certain hypervisors like VMWare, which discard the pending DB...

Microsoft Windows Kernel 'Win32k.sys' Local Privilege Escalation Vulnerability(CVE-2018-8120)

作者：bigric3 作者博客： 5月15日ESET发文其在3月份捕获了一个 pdf远程代码执行（cve-2018-4990）+windows本地权限提升（cve-2018-8120）的样本。ESET发文后，我从vt上下载了这样一份样本（）。初步逆向，大致明确如外界所传，该漏洞处于开发测试阶段，不慎被上传到了公网样本检测的网上，由ESET捕获并提交微软和adobe修补。测试特征字符串如下 定位样本中关键的代码并调试分析...

Epic Games Fortnite 4.2-CL-4072250 Insecure File Permissions

Summary Fortnite is a co-op sandbox survival game developed by Epic Games and People Can Fly and published by Epic Games. The game was released as a paid-for early access title for Microsoft Windows, macOS, PlayStation 4 and Xbox One on July 25, 2017, with a full free-to-play release expected in...

Multiple CPU Hardware CVE-2018-3639 Information Disclosure Vulnerability

Description Multiple CPU Hardware are prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected ARM Cortex A15 ARM Cortex A57 ARM Cortex A72 IBM AIX 5.3 IBM AIX 6.1 IBM AIX 7.1 IBM Aix...

JVN#91151862: Multiple Microsoft Windows applications and installers may insecurely load Dynamic Link Libraries

Multiple Windows applications and installers provided by Microsoft contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries in the same directory where applications and/or installers reside CWE-427. Microsoft states that the root cause of this...

JVN#72748502: Self-Extracting Archive files created by IExpress may insecurely load Dynamic Link Libraries

Self-extracting archive files created by IExpress provided Microsoft contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Microsoft states that the root cause of this vulnerability is "Application Directory App Dir DLL planting" and attac...

Schneider Electric EcoStruxure Geo SCADA Expert Detection (HTTP)

HTTP based detection of Schneider Electric EcoStruxure Geo SCADA Expert formerly ClearSCADA. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...

Microsoft Windows - Token Process Trust SID Access Check Bypass Privilege Escalation

Microsoft Windows - Token Process Trust SID Access Check Bypass Privilege Escalation Windows: Token Trust SID Access Check Bypass EOP Platform: Windows 10 1709 also tested current build of RS4 Class: Elevation of Privilege Summary: A token’s trust SID isn’t reset when setting a token after proces...

ManageEngine ServiceDesk DownloadSnapshotServlet Directory Traversal (CVE-2017-11512)

A directory traversal vulnerability exists in ManageEngine ServiceDesk for Microsoft Windows. The vulnerability is due to a lack of sanitization on user supplied input on requests to the DownloadSnapshotServlet before using the input in file operations...

Microsoft Windows win32k Menu Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

Microsoft Windows 2003 SP2 - RRAS SMB Remote Code Execution

Microsoft Windows 2003 SP2 - RRAS SMB Remote Code Execution !/usr/bin/env python -- coding: utf-8 -- Tested in Windows Server 2003 SP2 ES - Only works when RRAS service is enabled. The exploited vulnerability is an arbitraty pointer deference affecting the dwVarID field of the MIBOPAQUEQUERY...

Microsoft Windows PDF Library JPEG2000 Parsing Out of Bounds Write (CVE-2017-0291)

An out-of-bounds write vulnerability exists in the JPEG2000 component of the PDF library in Microsoft Windows. The vulnerability is due to improper validation of embedded JPEG2000 streams...