4201 matches found
PT-2022-1402
Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 91.5 Firefox versions prior to 96 Thunderbird versions prior to 91.5 Description The issue arises from the "Copy as curl" feature in DevTools, where the constructed curl command is not properly escaped for...
CVE-2021-43896 affecting package powershell 7.0.2-1
CVE-2021-43896 affecting package powershell 7.0.2-1. An upgraded version of the package is available that resolves this issue...
Shellcode-Encryptor - A Simple Shell Code Encryptor/Decryptor/Executor To Bypass Anti Virus
A simple shell code encryptor/decryptor/executor to bypass anti virus. Note: I have completely redone the work flow for creating the bypass, I have found injecting the binary into memory using PowerShell as the most effective method. Purpose To generate a .Net binary containing base64 encoded, AE...
Automox Agent 32 - Local Privilege Escalation Exploit
Exploit Title: Automox Agent 32 - Local Privilege Escalation Date: 13/12/2021 Exploit Author: Greg Foss Writeup: https://www.lacework.com/blog/cve-2021-43326/ Vendor Homepage: https://www.automox.com/ Software Link: https://support.automox.com/help/agents Version: 31, 32, 33 Tested on: Windows 10...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228scanner modified - Deprecated Original Scrip...
Automox Agent 32 Local Privilege Escalation
Exploit Title: Automox Agent 32 - Local Privilege Escalation Date: 13/12/2021 Exploit Author: Greg Foss Writeup: https://www.lacework.com/blog/cve-2021-43326/ Vendor Homepage: https://www.automox.com/ Software Link: https://support.automox.com/help/agents Version: 31, 32, 33 Tested on: Windows 10...
Microsoft Issues Fix for Exchange Y2K22 Bug That Crippled Email Delivery Service
Microsoft, over the weekend, rolled out a fix to address an issue that caused email messages to get stuck on its Exchange Server platforms due to what it blamed on a date validation error at around the turn of the year. "The problem relates to a date check failure with the change of the new year...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4PowerShell CVE-2021-44228 Proof of Concept A Proof-Of-C...
FortiSIEM Windows Agent Access Control Code Execution
The vulnerability of the FortiSIEM Windows Agent relates to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code or commands through PowerShell scripts...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228scanner Applications that are vulnerable to the...
Malicious Exchange Server Module Hoovers Up Outlook Credentials
Researchers have uncovered a previously unknown malicious IIS module, dubbed Owowa, that steals credentials when users log into Microsoft Outlook Web Access OWA. Internet Information Services IIS, Microsoft’s web server/web-hosting software suite, can be extended via various add-ons that are know...
CVE-2021-43896
Microsoft PowerShell Spoofing Vulnerability...
CVE-2021-43896
Microsoft PowerShell Spoofing Vulnerability...
AZL-7049 CVE-2021-43896 affecting package powershell for versions less than 7.2.1-1
Microsoft PowerShell Spoofing Vulnerability...
CVE-2021-43896
Microsoft PowerShell Spoofing Vulnerability...
Spoofing
Microsoft PowerShell Spoofing Vulnerability...
CVE-2021-43896 Microsoft PowerShell Spoofing Vulnerability
...
CVE-2021-43896
CVE-2021-43896 corresponds to Microsoft PowerShell Spoofing Vulnerability. Multiple connected sources confirm this as a PowerShell spoofing issue affecting PowerShell products; affected component is PowerShell, with confirmed remediation via upgraded packages (for example, Mariner entries note fi...
