1113 matches found
Microsoft Windows DHCP Server Resource Management Error Vulnerability
Microsoft Windows is a set of operating systems used by Microsoft Corporation USA for personal devices. A security vulnerability exists in Microsoft Windows DHCP Server. An attacker has exploited the vulnerability to cause a denial of service on the system. The following products and editions are...
Windows/x64 - PIC Null-Free TCP Reverse Shell Shellcode (476 Bytes)
import ctypes, struct import argparse from keystone import Exploit Title: Windows/x64 - PIC Null-Free TCP Reverse Shell Shellcode 476 Bytes Exploit Author: Senzee Date: 08/29/2023 Platform: Windows X64 Tested on: Windows 11 Home/Windows Server 2022 Standard/Windows Server 2019 Datacenter OS Versi...
Microsoft .NET Framework Multiple Vulnerabilities (KB5029655)
This host is missing an important security update according to Microsoft KB5029655 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
August 8, 2023—KB5029250 (OS Build 20348.1906)
None None...
Security update 2023-08-08
...
August 8, 2023-KB5029655 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022
None None...
Microsoft Message Queuing Security Vulnerability
Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to cause a denial of service. The following products and editio...
KLA51710 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation...
Microsoft Windows Windows Smart Card Resource Management Server Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Smart Card Resource Management Server. An attacker could exploit this vulnerability to bypass certain functionality. The following...
Microsoft Message Queuing Security Vulnerability
Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to cause a denial of service. The following products and editio...
Microsoft Windows Mobile Device Management Security Vulnerability
Microsoft Windows Mobile Device Management is a software service from Microsoft Corporation USA for Windows devices to support interaction with mobile devices. A security vulnerability exists in Microsoft Windows Mobile Device Management. An attacker could exploit the vulnerability to elevate...
Microsoft Message Queuing Security Vulnerability
Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker exploiting this vulnerability could remotely execute code. The following products and editions a...
Microsoft Message Queuing Security Vulnerability
Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to cause a denial of service. The following products and editio...
Microsoft Windows Group Policy Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Group Policy. An attacker could exploit this vulnerability to bypass certain features. The following products and...
Microsoft Hyper-V Security Vulnerability
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Role: A security vulnerability exists in Windows Hyper-V. An attacker exploiting this vulnerability could gain access to sensitive...
Perch CMS 3.2 Cross Site Scripting
Exploit Title: Date: 07/2023 Exploit Author: Andrey Stoykov Version: 3.2 Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com XSS 1: File: roles.edit.post.php Line 57: ... error'roleTitle', false;?" label'roleTitle', 'Title'; ? text'roleTitle', $Form-get$details, 'roleTitle'; ?...
WBCE 1.6.1 Cross Site Scripting
Exploit Title: WBCE - Stored XSS Date: 07/2023 Exploit Author: Andrey Stoykov Version: 1.6.1 Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com Steps to Exploit: 1. Login to application 2. Browse to following URI "http://host/wbce/admin/pages/intro.php" 3. Paste XSS payload "TEST...
XAMPP 8.2.4 - Unquoted Path Vulnerability
Exploit Title: XAMPP 8.2.4 - Unquoted Path Exploit Author: Andrey Stoykov Version: 8.2.4 Software Link: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/8.2.4/xampp-windows-x64-8.2.4-0-VS16-installer.exe Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com/ Steps to...
XAMPP 8.2.4 - Unquoted Path
Exploit Title: XAMPP 8.2.4 - Unquoted Path Date: 07/2023 Exploit Author: Andrey Stoykov Version: 8.2.4 Software Link: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/8.2.4/xampp-windows-x64-8.2.4-0-VS16-installer.exe Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com...
XAMPP 8.2.4 Unquoted Service Path
Exploit Title: XAMPP 8.2.4 - Unquoted Path Date: 07/2023 Exploit Author: Andrey Stoykov Version: 8.2.4 Software Link: https://sourceforge.net/projects/xampp/files/XAMPP%20Windows/8.2.4/xampp-windows-x64-8.2.4-0-VS16-installer.exe Tested on: Windows Server 2022 Blog: http://msecureltd.blogspot.com...