2448 matches found
Chinese Hackers Implant PlugX Variant on Compromised MS Exchange Servers
A Chinese cyberespionage group known for targeting Southeast Asia leveraged flaws in the Microsoft Exchange Server that came to light earlier this March to deploy a previously undocumented variant of a remote access trojan RAT on compromised systems. Attributing the intrusions to a threat actor...
Microsoft Active Directory Certificate Services NTLM Relay (CVE-2021-36942; CVE-2022-26925)
An NTLM relay vulnerability exists in Microsoft Active Directory Certificate Services. A remote attack can coerce Windows hosts to authenticate to other machines via the MS-EFSRPC protocol and obtain its NTLM credential. Successful exploitation could lead to complete takeover of the target domain...
Microsoft Rushes Fix for ‘PetitPotam’ Attack PoC
Microsoft was quick to respond with a fix to an attack dubbed “PetitPotam” that could force remote Windows systems to reveal password hashes that could then be easily cracked. To thwart an attack, Microsoft recommends system administrators stop using the now deprecated Windows NT LAN Manager NTLM...
New PetitPotam NTLM Relay Attack Lets Hackers Take Over Windows Domains
A newly uncovered security flaw in the Windows operating system can be exploited to coerce remote Windows servers, including Domain Controllers, to authenticate with a malicious destination, thereby allowing an adversary to stage an NTLM relay attack and completely take over a Windows domain. The...
Print Spooler Remote DLL Injection
The print spooler service can be abused by an authenticated remote attacker to load a DLL through a crafted DCERPC request, resulting in remote code execution as NT AUTHORITY\SYSTEM. This module uses the MS-RPRN vector which requires the Print Spooler service to be running. Module Options msf use...
No audio comes up through MS Edge or Google Chrome as published app
Using MS Edge or Google Chrome as published app, users get no audio through it when playing back audio or video media...
Denial Of Service (DoS)
wireshark is vulnerable to denial of service. The vulnerability exists due to excessive memory consumption in MS-WSP dissector...
Memory corruption vulnerability in Polaris Office windows version
Polaris Office is an office suite compatible with MS Word, Excel, PowerPoint and Adobe PDF. A memory corruption vulnerability exists in Polaris Office windows version. An attacker could exploit this vulnerability to cause the program to crash...
Memory corruption vulnerability in Polaris Office for windows (CNVD-2021-43946)
Polaris Office is an office suite compatible with MS Word, Excel, PowerPoint and Adobe PDF. A memory corruption vulnerability exists in Polaris Office windows version. An attacker could exploit this vulnerability to cause the program to crash...
Memory Corruption Vulnerability in Polaris Office for windows (CNVD-2021-43947)
Polaris Office is an office suite compatible with MS Word, Excel, PowerPoint and Adobe PDF. A memory corruption vulnerability exists in Polaris Office windows version. An attacker could exploit this vulnerability to cause the program to crash...
SUSE: Security Advisory (SUSE-SU-2020:2722-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Print Spooler Remote DLL Injection
The print spooler service can be abused by an authenticated remote attacker to load a DLL through a crafted DCERPC request, resulting in remote code execution as NT AUTHORITY\SYSTEM. This module uses the MS-RPRN vector which requires the Print Spooler service to be running. Module Options msf use...
Updated wireshark packages fix a security vulnerability
The MS-WSP dissector could consume excessive amounts of memory CVE-2021-22207...
DFIR-O365RC - PowerShell Module For Office 365 And Azure AD Log Collection
PowerShell module for Office 365 and Azure AD log collection Module description The DFIR-O365RC PowerShell module is a set of functions that allow the DFIR analyst to collect logs relevant for Office 365 Business Email Compromise investigations. The logs are generated in JSON format and retrieved...
KB5001412: Setup Dynamic Update for Windows 10, version 2004 and 20H2: April 27, 2021
None None...
CVE-2021-22207
A flaw was found in wireshark. A memory leak in the MS-WSP dissector allows an attacker to crash an application which uses wireshark due to excessive memory allocation. The attacker can trigger the flaw by injecting special packets onto the wire or by convincing a victim user into opening a...
DEBIAN-CVE-2021-22207
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file...
AZL-7405 CVE-2021-22207 affecting package wireshark for versions less than 3.4.14-1
Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file...
