Enhanced Mitigation Experience Toolkit (EMET) XML Injection

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFT-WINDOWS-EMET-XML-INJECTION.txt + ISR: Apparition Security Greetz: indoushka|Eduardo|Dirty0tis|cor3sm4sh3r Vendor: ================ www.microsoft.com Product:...

KYOCERA Net Admin 3.4 CSRF Add Admin Exploit

Summary KYOCERA Net Admin is Kyocera's unified device management software that uses a web-based platform to give network administrators easy and uncomplicated control to handle a fleet for up to 10,000 devices. Tasks that used to require multiple programs or walking to each printer can now be...

Microsoft Windows: Automatic Updates

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winautoupdates.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure Automatic Updates Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Sign-in last interactive user automatically

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsigninlastuser.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Sign-in last interactive user automatically after a system-initiated restart Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Always install with elevated privileges (User Templates)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wininstallprivileges.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Always install with elevated privileges users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Basic authentication (RM Client)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmclientbasicauth.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Allow Basic authentication Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: User control over installs

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winusercontrolinstalls.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Allow user control over installs Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Microsoft Windows: Basic authentication (RM Service)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmservbasicauth.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Allow Basic authentication Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows Information Disclosure (CVE-2010-0231) - Ver2

An information disclosure vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

Microsoft Windows: PowerShell Script Block Logging

This policy setting enables logging of all PowerShell script input to the Microsoft-Windows-PowerShell/Operational event log. If you enable this policy setting, Windows PowerShell will log the processing of commands, script blocks, functions, and scripts - whether invoked interactively, or throug...

Microsoft Windows: Unencrypted traffic (RM Client)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmclientunencrypted.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Allow unencrypted traffic Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Turn off toast notifications on the lock screen

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wintoastlockscreen.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Turn off toast notifications on the lock screen users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows 10: Turn off all Windows spotlight features

This policy setting lets you turn off all Windows Spotlight features at once. If you enable this policy setting, Windows spotlight on lock screen, Windows tips, Microsoft consumer features and other related features will be turned off. You should enable this policy setting if your goal is to...

Microsoft Windows: Unencrypted traffic (RM Service)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrmservunencrypted.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Allow unencrypted traffic Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Remote Shell Acces

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winremoteshaccess.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Allow Remote Shell Access Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Microsoft Windows: Heap termination on corruption

Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer immediately, although Explorer may still terminate unexpectedly later. C Microsoft Corporation 2015. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions mig...

Microsoft Windows: Time limit for disconnected sessions (Remote Desktop Services)

This policy setting allows you to configure a time limit for disconnected Remote Desktop Services sessions. You can use this policy setting to specify the maximum amount of time that a disconnected session remains active on the server. By default, Remote Desktop Services allows users to disconnec...

Microsoft Windows: Idle time limit (Remote Desktop Services)

This policy setting allows you to specify the maximum amount of time that an active Remote Desktop Services session can be idle without user input before it is automatically disconnected. If you enable this policy setting, you must select the desired time limit in the Idle session limit list...

Microsoft Windows 10: Localhost IP address for WebRTC (Edge)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winedgelocalhostipwebrtc.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Prevent using Localhost IP address for WebRTC Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.ne...

Microsoft Windows 10: Search and Cortana use location

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsearchcortanalocation.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Allow search and Cortana to use location Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Thi...