1683 matches found
Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability
...
Microsoft Windows Security Account Manager 权限许可和访问控制问题漏洞
Microsoft Windows Security Account Manager is a Windows security account manager from Microsoft USA for storing user passwords. It can be used to authenticate local and remote users. Microsoft Windows Security Account Manager is vulnerable to privilege permission and access control issues. No...
HermeticWiper: A detailed analysis of the destructive malware that targeted Ukraine
This blog post was authored by Hasherezade, Ankur Saini and Roberto Santos Disk wipers are one particular type of malware often used against Ukraine. The implementation and quality of those wipers vary, and may suggest different hired developers. The day before the invasion on Ukraine by Russian...
The vulnerability of the Windows Security Center API component of the Windows operating system, which allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Security Center API component of the Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2022-22000
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
Code injection
ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM...
Microsoft Patch Tuesday, February 2022 Edition
Microsoft today released software updates to plug security holes in its Windows operating systems and related software. This months relatively light patch batch is refreshingly bereft of any zero-day threats, or even scary critical vulnerabilities. But it does fix four dozen flaws, including...
Description of the security update for SharePoint Server Subscription Edition: February 8, 2022 (KB5002145)
None None...
Windows/x86 Download File / Execute Shellcode (458 bytes)
; Exploit Title: Windows/x86 - Download File and Execute / Dynamic PEB & EDT method Shellcode 458 bytes ; Exploit Author: Techryptic @Tech ; Date: 2022-01-31 ; Tested on: WIN7X86 ; Shoutout to 848 Advanced Software Exploitation and DSU. ; Description: ; The shellcode works in three parts. The fir...
CVE-2022-23611 OS command injection in iTunesRPC-Remastered
iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize image file paths leading to OS level command injection. This issue has been patched in commit cdcd48b. Users are advised to upgrade...
TokenUniverse - An Advanced Tool For Working With Access Tokens And Windows Security Policy
Token Universe is an advanced tool that provides a wide range of possibilities to research Windows security mechanisms. It has a convenient interface for creating, viewing, and modifying access tokens, managing Local Security Authority and Security Account Manager's databases. It allows you to...
CVE-2022-21874
Windows Security Center API Remote Code Execution Vulnerability...
CVE-2022-21874
Windows Security Center API Remote Code Execution Vulnerability...
CVE-2022-21874
Windows Security Center API Remote Code Execution Vulnerability...
Privilege escalation
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
Privilege escalation
Windows Storage Elevation of Privilege Vulnerability...
Remote code execution
Windows Security Center API Remote Code Execution Vulnerability...
Privilege escalation
Windows Devices Human Interface Elevation of Privilege Vulnerability...
