EDRaser - Tool For Remotely Deleting Access Logs, Windows Event Logs, Databases, And Other Files

EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. Automated Mode In automated mode, EDRaser scans the C class of a given address space of IPs for vulnerable syste...

Published Desktop session stuck at grey screen on session launch

Published Desktop session stuck at grey screen on session launch. You may see Citrix CTXUVI error events in Windows system Event logs with ID 1003/1005 on Citrix VDAs CTXUVI Driver Injection failure...

Joining Server Group failed with error "Exception attempting to authorize, TCP error code 10060"

Joining the Server Group failed with the following errors. Studio UI: Please refer to the Windows Event Log on the Authorizer details. Windows Event Log: Citrix Cluster Join Service,1,2201,"Join failed. Exception attempting to authorize. Could not connect to...

IBM QRadar WinCollect Agent 安全漏洞

IBM QRadar WinCollect Agent is an agent program from International Business Machines IBM that collects and sends Windows event logs. A security vulnerability exists in IBM QRadar WinCollect Agent versions 10.0 through 10.1.3. An attacker could exploit the vulnerability to elevate system privilege...

ThreatHound - Tool That Help You On Your IR & Threat Hunting And CA

This tool will help you on your IR & Threat Hunting & CA. just drop your event log file and anlayze the results. New Release Features: support windows ThreatHound.exe C for Linux based new vesion available in C also now you can save results in json file or print on screen it as you want by arg...

The vulnerability of Windows Event Tracing service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Windows Event Tracing in operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

CVE-2023-21753

Event Tracing for Windows Information Disclosure Vulnerability...

CVE-2023-21536

Event Tracing for Windows Information Disclosure Vulnerability...

Ransomware Hackers Using New Way to Bypass MS Exchange ProxyNotShell Mitigations

Threat actors affiliated with a ransomware strain known as Play are leveraging a never-before-seen exploit chain that bypasses blocking rules for ProxyNotShell flaws in Microsoft Exchange Server to achieve remote code execution RCE through Outlook Web Access OWA. "The new exploit method bypasses...

The vulnerability of the Windows Event Tracing service allows a perpetrator to cause a service failure.

The vulnerability of Windows Event Tracing service exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Windows Event Logging, a service in the Windows operating system, allows a perpetrator to trigger a service failure.

The vulnerability of Windows Event Logging service is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Researchers Detail Windows Event Log Vulnerabilities: LogCrusher and OverLog

Cybersecurity researchers have disclosed details about a pair of vulnerabilities in Microsoft Windows, one of which could be exploited to result in a denial-of-service DoS. The exploits, dubbed LogCrusher and OverLog by Varonis, take aim at the EventLog Remoting Protocol MS-EVEN, which enables...

CVE-2022-37981

Windows Event Logging Service Denial of Service Vulnerability...

CVE-2022-37981

Windows Event Logging Service Denial of Service Vulnerability...

CVE-2022-37981

Windows Event Logging Service Denial of Service Vulnerability...

Denial of service

Windows Event Logging Service Denial of Service Vulnerability...

CVE-2022-35832

Windows Event Tracing Denial of Service Vulnerability...

CVE-2022-35832

Windows Event Tracing Denial of Service Vulnerability...

Denial of service

Windows Event Tracing Denial of Service Vulnerability...

CVE-2022-35832 Windows Event Tracing Denial of Service Vulnerability

...