goLoL

goLoL goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current privilege level with MITRE ATT&CK mappings and can scan local .sys files for vulnerable/malicious LOLDrivers hash matches. Note: This is not an OPSEC saf...

Log4j-Windows-Scanner

Log4j-Windows-Scanner CVE-2021-44228 vulnerability in Apache Log4j library | Log4j vulnerability scanner on Windows machines. How does it work It detects the vulnerable versions of log4j by following the folders in the C Directory. When it exposes vulnerable files, it reveals ".TXT" files as...

log4j-scanner

log4j-scanner Log4j 2 CVE-2021-44228 vulnerability scanner for Windows OS. Example Usage Usage .\log4j-scanner.exe Terminal is used to output results, deploy this to machines via RMM and Start/Report from PowerShell or CMD Prompt. Build from source git clone...

Xmlrpc-scanner

QMLRPC Vulnerability Scanner 🚀 Windows-compatible advanced QM...

CVE-2025-59457: Permissive List of Allowed Inputs

In JetBrains TeamCity before 2025.07.2 missing Git URL validation allowed credential leakage on Windows...

CVE-2025-54531: Relative Path Traversal

In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on Windows...

Adobe InDesign < 12.0.0 (APSB16-43)

The version of Adobe InDesign installed on the remote Windows host is prior to 12.0.0. It is, therefore, affected by a vulnerability as referenced in the APSB16-43 advisory. - Adobe InDesign version 11.4.1 and earlier, Adobe InDesign Server 11.0.0 and earlier have an exploitable memory corruption...

Adobe Premiere Pro < 23.6.9 / 24.0 < 24.6 Multiple Vulnerabilities (APSB24-58)

The version of Adobe Premiere Pro installed on the remote Windows host is prior to 23.6.9, 24.6. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-58 advisory. - Premiere Pro versions 24.5, 23.6.8 and earlier are affected by an out-of-bounds write vulnerability th...

Apple iTunes < 12.12.9 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213763 advisory. - A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be...

Adobe InDesign < 18.5.3 / 19.0 < 19.4.0 Multiple Vulnerabilities (APSB24-48)

The version of Adobe InDesign installed on the remote Windows host is prior to 18.5.3, 19.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-48 advisory. - InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow...

Adobe ColdFusion < 2018.x < 2018u19 / 2021.x < 2021u9 / 2023.x < 2023u3 Multiple Vulnerabilities (APSB23-47)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 19, 2021.x update 9, or 2023.x update 3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-47 advisory. - Deserialization of Untrusted Data CWE-502 potentially leading t...

Citrix Storefront Installed (Windows)

Binary data citrixstorefrontwininstalled.nbin...

Adobe Photoshop 22.x < 22.5.8 / 23.x < 23.4.1 Multiple Vulnerabilities (APSB22-35)

The version of Adobe Photoshop installed on the remote Windows host is prior to 22.5.8/23.4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb22-35 advisory. - Adobe Photoshop versions 22.5.7 and earlier and 23.3.2 and earlier are affected by a Use After Free...

Adobe Media Encoder < 14.3 Multiple Vulnerabilities (APSB20-36)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 14.3. It is, therefore, affected by multiple vulnerabilities, as follows: - Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary...

Oracle Java SE 1.7.0_291 / 1.8.0_281 / 1.11.0_10 / 1.15.0_2 Information Disclosure (Windows Jan 2021 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 291, 8 Update 281, 11 Update 10, or 15 Update 2. It is, therefore, affected by an information disclosure vulnerability as referenced in the January 2021 CPU advisory. Specifically, an...

QEMU Installed

Binary data qemuinstalledwindows.nbin...

New malware mimics Windows scanner to infect PCs with ransomware

By Sudais This trojan horse was discovered which pretends to be a Windows scanner by Microsoft but in reality, it is everything evil but so. This is a post from HackRead.com Read the original post: New malware mimics Windows scanner to infect PCs with ransomware...

Symantec Endpoint Protection Client 12.1.x < 12.1.6 MP6 Multiple DoS (SYM16-015)

The version of Symantec Endpoint Protection SEP Client installed on the remote Windows host is 12.1.x prior to 12.1.6 MP6 or else 12.1.6 MP5 without a hotfix. It is, therefore, affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists in the decomposer...

Microsoft Windows Current Sessions

Binary data microsoftwindowscurrentsessions.nbin...

Adobe Acrobat < 10.1.16 / 11.0.13 / 2015.006.30094 / 2015.009.20069 Multiple Vulnerabilities (APSB15-24)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 10.1.16, 11.0.13, 2015.006.30094, or 2015.009.20069. It is, therefore, affected by multiple vulnerabilities. - The ANAuthenticateResource method in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before...