Lucene search
K

3109 matches found

CNVD
CNVD
added 2018/10/12 12:0 a.m.3 views

Microsoft .NET Core and PowerShell Core Information Disclosure Vulnerability

Microsoft .NET Core is a free and open source development platform from Microsoft. The platform has multi-language support and cross-platform features.PowerShell Core is a task automation and management framework based on the . An information disclosure vulnerability exists in Microsoft .NET Core...

7.5CVSS7.1AI score0.08142EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2018/10/11 12:0 a.m.30 views

Microsoft PowerShell Core Information Disclosure Vulnerability (Oct 2018) - Linux

This host is missing an important security update for PowerShell Core according to Microsoft security advisory CVE-2018-8292. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.5CVSS7.9AI score0.08142EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2018/10/11 12:0 a.m.21 views

Microsoft PowerShell Core Information Disclosure Vulnerability (Oct 2018) - Windows

This host is missing an important security update for PowerShell Core according to Microsoft security advisory CVE-2018-8292. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.5CVSS7.9AI score0.08142EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2018/10/11 12:0 a.m.38 views

Microsoft PowerShell Core Information Disclosure Vulnerability (Oct 2018) - Mac OS X

This host is missing an important security update for PowerShell Core according to Microsoft security advisory CVE-2018-8292. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

7.5CVSS7.9AI score0.08142EPSS
Exploits0References3
OSV
OSV
added 2018/10/10 1:29 p.m.2 views

CVE-2018-8492

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019...

5.3CVSS5.9AI score0.01062EPSS
Exploits0References3
NVD
NVD
added 2018/10/10 1:29 p.m.25 views

CVE-2018-8292

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0...

7.5CVSS7.1AI score0.08142EPSS
Exploits0References3
OSV
OSV
added 2018/10/10 1:29 p.m.28 views

CVE-2018-8292

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0...

7.5CVSS6.3AI score0.08142EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2018/10/10 1:29 p.m.4 views

CVE-2018-8492

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019...

5.3CVSS5.7AI score0.01062EPSS
Exploits0References4
Prion
Prion
added 2018/10/10 1:29 p.m.18 views

Security feature bypass

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019...

4.6CVSS5.7AI score0.01062EPSS
Exploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2018/10/10 1:29 p.m.31 views

CVE-2018-8292

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0...

7.5CVSS7.1AI score0.08142EPSS
Exploits0References3
CVE
CVE
added 2018/10/10 1:0 p.m.107 views

CVE-2018-8492

CVE-2018-8492 is a Device Guard Code Integrity Policy Security Feature Bypass vulnerability in Windows. Affected products include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server editions. The root cause is a security feature bypass in Device Guard that could allow an a...

5.3CVSS6.2AI score0.01062EPSS
Exploits0References3Affected Software3
Cvelist
Cvelist
added 2018/10/10 1:0 p.m.39 views

CVE-2018-8292

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0...

7.2AI score0.08142EPSS
Exploits0References3
Cvelist
Cvelist
added 2018/10/10 1:0 p.m.28 views

CVE-2018-8492

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019...

6.3AI score0.01062EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2018/10/10 12:15 a.m.2 views

Core: information disclosure due to authentication information exposed in a redirect

An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0...

7.5CVSS5.8AI score0.08142EPSS
Exploits0References4
Kitploit
Kitploit
added 2018/10/09 9:48 p.m.72 views

Clrinject - Injects C# EXE Or DLL Assembly Into Every CLR Runtime And AppDomain Of Another Process

Injects C EXE or DLL Assembly into any CLR runtime and AppDomain of another process. The injected assembly can then access static instances of the injectee process's classes and therefore affect it's internal state. Usage clrinject-cli.exe -p -a Opens process with id or name , inject EXE and...

7.5AI score
Exploits0References1
ThreatPost
ThreatPost
added 2018/10/09 3:10 p.m.31 views

ThreatList: Microsoft IIS Sees Triple-Digit Spike in Cyberattack Volume

Internet Information Services IIS, an extensible web server originally created by Microsoft for use with the Windows NT family, saw a whopping 782x increase in cyberattacks during the second quarter, according to analysis. According to eSentire’s latest threat report based on data gathered from...

7.4AI score
Exploits0References3
Microsoft CVE
Microsoft CVE
added 2018/10/09 7:0 a.m.25 views

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code...

5.3CVSS3.6AI score0.01062EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2018/10/09 12:0 a.m.139 views

KB4462917: Windows 10 Version 1607 and Windows Server 2016 October 2018 Security Update

The remote Windows host is missing security update 4462917. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker...

9.3CVSS8.1AI score0.81325EPSS
Exploits17References24
Exploit DB
Exploit DB
added 2018/10/08 12:0 a.m.85 views

360 3.5.0.1033 - Sandbox Escape

360 3.5.0.1033 - Sandbox Escape. Local exploit for Windows platform Exploit Title: 360 3.5.0.1033 - Sandbox Escape Date: 2018-10-08 Exploit Author: vrsystem Vendor Homepage: https://www.360.cn/ Software Link: https://dl.360safe.com/360/inst.exe Version: 3.5.0.1033 Tested on: 3.5.0.1033 CVE : None...

7.4AI score
Exploits0
Kitploit
Kitploit
added 2018/10/05 12:3 p.m.74 views

DbgShell - A PowerShell Front-End For The Windows Debugger Engine

A PowerShell front-end for the Windows debugger engine. Ready to tab your way to glory? For a quicker intro, take a look at Getting Started. Disclaimers 1. This project is not produced, endorsed, or monitored by the Windows debugger team. While the debugger team welcomes feedback about their API...

6.6AI score
Exploits0References9
Rows per page
Query Builder