3615 matches found
CVE-2020-1350
CVE-2020-1350 CVE-2020-1350 概念验证 环境设置 1. 下载 Windows Server 2016 2. 下载一台 Linux 机器（用于运行此脚本的辅助机器） 3. 在 Windows Server 2016 上安装 Active Directory/DNS（假设你将合法域名命名为 33y0re.com） 4. Windows Server 2016 上 不要 有任何 DNS 记录（暂时） 5. 在 Windows Server 2016 映像上创建一个 "转发器" 记录，指向 Linux 机器的 IP 使用方法 1. 选择你的域名（"攻击" 域名） 2...
CVE-2021-31166-Exploit
CVE-2021-31166-Exploit 针对MS HTTP协议栈RCE漏洞（CVE-2021-31166）的利用程序 精心构造的HTTP请求指向存在漏洞的Windows版本将导致DOS攻击。服务器将以蓝屏错误重启。 Http.sys是Windows内核驱动程序，负责处理HTTP请求并构造响应。 此存在漏洞的http.sys驱动程序无法处理特制的"Accept-Encoding"头部，导致崩溃，进而服务器重启。 在蓝屏上，我们可以看到错误信息"停止代码: KERNEL SECURITY CHECK FAILED" 这是一个严重漏洞，CVSS评分为9.8，易于利用。...
CVE-2022-30136
CVE-2022-30136 Windows 网络文件系统远程利用（拒绝服务）概念验证 概念验证：https://github.com/fortra/CVE-2022-30136 详细信息：https://www.coresecurity.com/core-l...136-windows-network-file-system-vulnerability 受影响产品：Windows Server 2016、2019...
Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks.
模拟与防范Zerologon（CVE-2020-1472）漏洞攻击 模拟在Windows Server 2016上对Active Directory中Zerologon（CVE-2020-1472）漏洞的攻击，并使用Trend Micro Deep Security解决方案来防范此类攻击。 Zerologon漏洞是Netlogon协议中的一个弱点，可在无需密码的情况下被利用，使攻击者能够轻易控制Active Directory系统中的域控制器。 工具 VMware Workstation Windows Server 2016 Active Directory Kali Linux...
Zerologon_CVE-2020-1472
ZerologonCVE-2020-1472 目标 该漏洞研究旨在建立一个受控环境，通过 Kali Linux 在 Windows Server 2016 上模拟 Zerologon 攻击，以实现检测和缓解目的。主要目标是执行漏洞渗透，并展示在不以桌面用户身份登录的情况下控制桌面的可能性，同时检测和缓解该漏洞。 学到的技能 对 Windows 事件查看器的高级理解 精通 Kali Linux 和 Impackets 执行 Zerologon 的能力 使用的工具 Zerologon 代码 Windows Server 2016 Kali Linux 实施 Zerologon 的步骤 Kal...
2026-09 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB5126047)
2026-09 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 KB5126047...
2026-09 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5123099)
2026-09 Cumulative Update for Windows Server 2016 for x64-based Systems KB5123099...
KB5123099: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2026)
The remote Windows host is missing security update 5123099. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
EternalRomance-Exploit-Against-Windows-Machine
Overview EternalRomance is a critical Windows remote code execu...
2026-08 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB5120702)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2026-08 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5120418)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
August 11, 2026-KB5120702 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016
None None...
KB5120236: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: August 11, 2026
None None...
Security Updates for Microsoft SharePoint Server 2016 (August 2026)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. CVE-2026-62827 -...
Security Updates for Microsoft SharePoint Server 2016 (July 2026)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network. CVE-2026-505...
Microsoft Office SharePoint Server Cross-site Scripting Vulnerability (CNVD-2026-29408)
Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, and Microsoft SharePoint Server Subscription Edition are enterprise-level collaboration platforms developed by Microsoft. They are primarily used for document management, content publishing, and workflow collaboration...
2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5099535)
2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems KB5099535...
2026-07 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB5101007)
2026-07 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 KB5101007...