3271 matches found
Microsoft DNS Server代码注入漏洞
Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Role: DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Cor...
Microsoft Windows Cluster Shared Volume 输入验证错误漏洞
Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and editions are affected:Windows Server, version 20H2 Server Core...
Microsoft DNS Server 代码注入漏洞
Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Core...
Microsoft Windows Network File System代码注入漏洞
Microsoft Windows Network File System is a file sharing solution from Microsoft that allows you to transfer files between computers running Windows Server and UNIX operating systems using the NFS protocol. A code injection vulnerability exists in Microsoft Windows Network File System. The followi...
Microsoft Hyper-V信息泄露漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An information disclosure vulnerability exists in Microsoft Hyper-V. The following products and versions are affected:Windows Server 2022,Windows...
Microsoft Windows Multiple Vulnerabilities (KB5011495)
This host is missing an important security update according to Microsoft KB5011495 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
2022-03 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5011495)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Microsoft Hyper-V 竞争条件问题漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A vulnerability exists in Microsoft Hyper-V due to a competitive condition issue. The following products and versions are affected: Windows Server...
KB5011495: Windows 10 Version 1607 and Windows Server 2016 Security Update (March 2022)
The remote Windows host is missing security update 5011495. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-23283, CVE-2022-23284, CVE-2022-23287, CVE-2022-23290, CVE-2022-23293,...
Red Team lab automation
It’s not uncommon for red teamers to regularly tear down and rebuild their test labs, I know I do on a sometimes daily basis. It keeps things fresh and manageable, and now, using Infrastructure as Code IaC, we can create a consistent environment to test tools and techniques in. If we break...
Exploit for CVE-2021-1675
CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewa...
Security Updates for Microsoft SharePoint Server 2016 (December 2021)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-42320,...
Microsoft Windows Multiple Vulnerabilities (KB5010359)
This host is missing an important security update according to Microsoft KB5010359 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Security Updates for Microsoft SharePoint Server 2016 (February 2022)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21987 ...
2022-02 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5010359)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
Description of the security update for SharePoint Enterprise Server 2016: February 8, 2022 (KB5002136)
None None...
February 8, 2022-KB5010460 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
None None...
KLA12458 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability ...
Microsoft Windows Print Spooler Components 后置链接漏洞
Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Print Spooler Components. The following products and versions are affected:Windows 10 for x64-based Systems,Windows 10 Version 16...
WorkTime 10.20 Build 4967 - Unquoted Service Path
Exploit Title: WorkTime 10.20 Build 4967 - Unquoted Service Path Discovery by: Yehia Elghaly Date: 30-12-2021 Vendor Homepage: https://www.worktime.com/ Software Link: https://www.worktime.com/download/worktimecorporate.exe Tested Version: 10.20 Build Build 4967 Vulnerability Type: Unquoted Servi...