3271 matches found
Windows Modules Installer Elevation of Privilege Vulnerability (KB4565912)
This host is missing an important security update according to Microsoft KB4565912 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft .NET Framework Remote Code Execution Vulnerability (KB4565628)
This host is missing a critical security update according to Microsoft KB4565628 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Servicing stack update for Windows 10, version 1607: July 14, 2020
None None...
Description of the security update for SharePoint Enterprise Server 2016: July 14, 2020 (KB4484440)
None None...
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system,...
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system,...
July 14, 2020-KB4565628 Cumulative Update for .NET Framework 4.8 for Windows 10 version 1607 and Windows Server 2016
None None...
KB4565511: Windows 10 Version 1607 and Windows Server 2016 July 2020 Security Update
The remote Windows host is missing security update 4565511. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this vulnerability...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
This is a proof-of-concept PoC exploit for CVE-2020-0796, also known as SMBGhost, a pre-authentication remote code execution vulnerability in Windows SMBv3. The exploit targets the SMBGhost vulnerability in Windows operating systems, specifically Windows 10 and Windows Server 2016 and 2019. The...
Microsoft SharePoint Server 2016 < 16.0.5017.1001 Multiple Vulnerabilities
According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication...
Microsoft SharePoint Server 2016 < 16.0.5005.1000 Multiple Vulnerabilities
According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application...
Background Intelligent Transfer Service CVE-2020-0787 - Privilege Escalation
This Metasploit module exploits CVE-2020-0787, an arbitrary file move vulnerability This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Background Intelligent Transfer Service Arbitrary File Move...
Background Intelligent Transfer Service Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Background Intelligent Transfer Service Arbitrary File Move Privilege Elevation Vulnerability', 'Description' = %q This module exploits...
Adobe Flash Player Microsoft Edge and Internet Explorer Security Update (APSB20-30) - Windows
Adobe Flash Player is prone to an arbitrary code execution vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...
2020-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4561616)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Description of the security update for SharePoint Enterprise Server 2016: June 9, 2020
None None...
Security Update for Adobe Flash Player: June 9, 2020
None None...
Server VDA with vGPU hangs when the default hybrid mode graphics (GDI + Direct3D)
On a VDA running on Windows Server 2016, the OS could get into a hung statein a scenario when itis used asa double-hop to other resources and a vGPU is available. This will be observed when wfica32.exe attempts to useGDI +Direct3Drendering called Hybrid mode. The issue was identified as part of O...
Microsoft Windows Task Scheduler Security Feature Bypass Vulnerability
Compass Security identified a security feature bypass vulnerability in Microsoft Windows. Due to the absence of integrity verification requirements for the RPC protocol and in particular the Task Scheduler, a man-in-the-middle attacker can relay his victim's NTLM authentication to a target of his...
