Kekeo - A Little Toolbox To Play With Microsoft Kerberos In C

kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code generator/library th...

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Visual Studio software development environment is related to insufficient input validation. This allows attackers to trigger service failures.

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Visual Studio software development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

PrintNightmare

This is a PoC Proof of Concept exploit for the Print Nightmare vulnerability, which affects Windows Print Spooler service. The repository contains a Visual Studio solution file EXP/POC.sln that includes a C++ project POC with a main function. The project uses the RPC Remote Procedure Call client...

Exploit for CVE-2021-1675

C PrintNightmare CVE-2021-1675 You'll need a DLL to use Sh...

Security Update for Microsoft Visual Studio Code (September 2021)

The version of Microsoft Visual Studio Code installed on the remote host is prior to 1.59.1. It is, therefore, affected by code spoofing vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300...

Finding 0-days with Jackalope

ARCHIVED STORY Finding 0-days with Jackalope By Douglas McKee · September 16, 2021 Overview On March 21st, 2021, the McAfee Enterprise Advanced Threat Research ATR team released several vulnerabilities it discovered in the Netop Vision Pro Education software, a popular schooling software used by...

Microsoft Visual Studio Incorrect Permission Assignment Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Visual Studio. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Visual...

Security Updates for Microsoft Visual Studio Products (September 2021)

The Microsoft Visual Studio Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - A permission assignment vulnerability exists in Visual Studio after installing the Game development with C++ and selecting the Unreal Engine Installer workload. The...

Microsoft Visual Studio DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-36952

Visual Studio Remote Code Execution Vulnerability...

CVE-2021-36952

Visual Studio Remote Code Execution Vulnerability...

CVE-2021-26434

Visual Studio Elevation of Privilege Vulnerability...

CVE-2021-26434

Visual Studio Elevation of Privilege Vulnerability...

CVE-2021-26437

Visual Studio Code Spoofing Vulnerability...

CVE-2021-26437

Visual Studio Code Spoofing Vulnerability...

Remote code execution

Visual Studio Remote Code Execution Vulnerability...

Spoofing

Visual Studio Code Spoofing Vulnerability...

Privilege escalation

Visual Studio Elevation of Privilege Vulnerability...

CVE-2021-36952

Visual Studio Remote Code Execution Vulnerability...

CVE-2021-26434

Visual Studio Elevation of Privilege Vulnerability...