473 matches found
Active Directory Reconnaissance: ADRecon
ADRecon is a tool which extracts various artifacts as highlighted below out of an AD environment in a specially formatted Microsoft Excel report that includes summary views with metrics to facilitate analysis. The report can provide a holistic picture of the current state of the target AD...
Automattic: RCE via Print function [Simplenote 1.1.3 - Desktop app]
In Simplenote 1.1.3 - Desktop app there is a stored XSS vulnerability that can be used to execute arbitrary code. If there is malicious code in the note and the user tries to print it for example to save it as a PDF, the malicious code runs. This report is based on the report 291539, by Yasin...
Servicing stack update for Windows 10 Version 1703: May 17, 2018
None None...
May 1, 2018, update for Office 2016 (KB3203479)
None None...
RTA - Framework Designed To Test The Detection Capabilities Against Malicious Tradecraft
RTA provides a framework of scripts designed to allow blue teams to test their detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK. RTA is composed of python scripts that generate evidence of over 50 different ATT&CK tactics, as well as a compiled binary application th...
RTA (Red Team Arsenal) - An Intelligent Scanner To Detect Security Vulnerabilities In Companies Layer 7 Assets
Red Team Arsenal is a web/network security scanner which has the capability to scan all company's online facing assets and provide an holistic security view of any security anomalies. It's a closely linked collections of security engines to conduct/simulate attacks and monitor public facing asset...
An Intelligent Network Security Scanner: Red Team Arsenal
Red Team Arsenal is a web/network security scanner which has the capability to scan all company’s online facing assets and provide an holistic security view of any security anomalies. It’s a closely linked collections of security engines to conduct/simulate attacks and monitor public facing asset...
Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities
Exploit Author: bzyo CVE: CVE-2018-10077, CVE-2018-10078, CVE-2018-10079 Twitter: @bzyo Exploit Title: Geist WatchDog Console 3.2.2 - Multiple Vulnerabilities Date: 04-17-18 Vulnerable Software: WatchDog Console - 3.2.2 Vendor Homepage: http://www.itwatchdogs.com/ Version: 3.2.2 Software Link:...
Description of the security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1: April 10, 2018
Description of the security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1: April 10, 2018 Notice Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS. Summary An information disclosure...
Description of the security update for the information disclosure vulnerability in Visual Studio 2015 Update 3: April 10, 2018 (KB4087371)
None None...
Description of the security update for the information disclosure vulnerability in Visual Studio 2013 Update 5: April 10, 2018
None None...
Servicing stack update for Windows 10, version 1703: April 10, 2018
None None...
Servicing stack update for Windows 10, version 1507: April 10, 2018
None None...
Servicing stack update for Windows 10 Version 1607: March 22, 2018
None None...
Update for Adobe Flash Player: March 14, 2018
None None...
Microsoft Teams help & learning
None None...
metasploit-framework
This is the Metasploit Framework repository. It is an offensive tool for penetration testing and vulnerability exploitation. The primary vulnerability class/vector targeted by this framework is not explicitly stated, but it is likely to be a wide range of vulnerabilities, including remote code...
January 2, 2018, update for Office 2016 (KB3178662)
None None...
Servicing stack update for Windows 10 Version 1709: November 30, 2017
None None...
Automattic: [Simplenote for Windows] Client RCE via External JavaScript Inclusion leveraging Electron
Hi, A carefully crafted injection in the Markdown parser within Simplenote for Windows can be leveraged to achieve remote code execution via an external JavaScript file. The nature of Simplenote's content sharing system, which makes use of tags containing email addresses, means that an adversary...