KLA11929 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A memory corruption...

Microsoft Windows and Microsoft Windows Server Privilege Mobilization Vulnerability (CNVD-2019-31847)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the way ws2ifsl.sys Winsock handles memo...

CVE-2019-1215

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys Winsock handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303...

CVE-2019-1215

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys Winsock handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303...

Privilege escalation

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys Winsock handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303...

CVE-2019-1215

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys Winsock handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303...

CVE-2019-1215

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys Winsock handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303...

CVE-2019-1215

CVE-2019-1215 describes a local privilege-escalation in Windows via ws2ifsl.sys (Winsock) where improper handling of memory-resident objects enables code execution with elevated privileges. Affected component is Winsock’s ws2ifsl.sys; root cause is memory handling of objects within the Winsock su...

CVE-2019-1215

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys Winsock handles objects in memory, aka ‘Windows Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303. Recent assessments: Assessed Attacker Value: 0 Assessed Attacke...

Microsoft Windows Multiple Vulnerabilities (KB4516065)

This host is missing a critical security update according to Microsoft KB4516065 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that ws2ifsl.sys Winsock handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated privileges. To exploit the vulnerability, a locally authenticated attacker could run a specially...

PT-2019-3196 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to a driver vulnerability in the ws2ifsl.sys Winsock component of the Windows operating system, which is associated with errors in processing objects in...

VulnCheck KEV: CVE-2019-1215

Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys Winsock handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code with elevated privileges...

KB4516062: Windows Server 2012 September 2019 Security Update

The remote Windows host is missing security update 4516062 or cumulative update 4516055. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server. An attacker who...

March 12, 2019—KB4489883 (Security-only update)

None None...

Sync Breeze Enterprise 10.0.28 - Remote Buffer Overflow (PoC)

Sync Breeze Enterprise 10.0.28 - Remote Buffer Overflow PoC / Sync Breeze Enterprise BOF - Ivan Ivanovic Ivanov Иван-дурак недействительный 31337 Team / define WINSOCKDEPRECATEDNOWARNINGS define DEFAULTBUFLEN 512 include include include include DWORD SendRequestchar request, int requestsize WSADA...

Sync Breeze Enterprise 10.0.28 - Remote Buffer Overflow (PoC)

/ Sync Breeze Enterprise BOF - Ivan Ivanovic Ivanov Иван-дурак недействительный 31337 Team / define WINSOCKDEPRECATEDNOWARNINGS define DEFAULTBUFLEN 512 include include include include DWORD SendRequestchar request, int requestsize WSADATA wsa; SOCKET s; struct sockaddrin server; char...

Oracle XDB FTP Service UNLOCK Buffer Overflow

/ Oracle XDB FTP Service UNLOCK Buffer Overflow Exploit / / David Litchfield from ngssoftware at Blackhat 2003/ / / / Original Advisory : / / http://www.blackhat.com/presentations/bh-usa-03/bh- / / us-03-litchfield-paper.pdf / include include include int GainControlOfOraclechar , char ; int...

Microsoft Windows (x86) - afd.sys Local Privilege Escalation (MS11-046)

Microsoft Windows x86 - afd.sys Local Privilege Escalation MS11-046 / Exploit Title: Windows x86 all versions AFD privilege escalation MS11-046 Date: 2016-10-16 Exploit Author: Tomislav Paskalev Vulnerable Software: Windows XP SP3 x86 Windows XP Pro SP2 x64 Windows Server 2003 SP2 x86 Windows...

Npcap - the Nmap Project's packet sniffing library for Windows

Npcap is an update of WinPcap to NDIS 6 Light-Weight Filter LWF technique. It supports Windows Vista, 7, 8 and 10 . It is sponsored by the Nmap Project and developed by Yang Luo under Google Summer of Code 2013 and 2015 . It also received many helpful tests from Wireshark and NetScanTools...