CVE-2020-1350

CVE-2020-1350 CVE-2020-1350 개념 증명 환경 설정 1. Windows Server 2016을 다운로드합니다. 2. Linux 박스를 다운로드합니다이 스크립트를 실행할 보조 박스. 3. Windows Server 2016에 Active Directory/DNS를 설치합니다정식 도메인 이름을 33y0re.com으로 지정했다고 가정. 4. Windows 2016 서버에 아직 DNS 레코드가 없어야 합니다. 5. Windows Server 2016 이미지에 Linux 박스의 IP를 사용하여 "forwarder"...

Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks.

Zerologon（CVE-2020-1472）脆弱性攻撃のシミュレーションと防止 Windows Server 2016上のActive DirectoryにおけるZerologon（CVE-2020-1472）脆弱性攻撃のシミュレーションと、Trend Micro Deep Securityソリューションを使用したそのような攻撃の防止。 Zerologon脆弱性は、パスワードを必要とせずに悪用可能なNetlogonプロトコルの弱点であり、攻撃者はActive Directoryシステム内のドメインコントローラーを容易に制御できるようになります。 ツール VMware...

Zerologon_CVE-2020-1472

ZerologonCVE-2020-1472 목표 이 취약점 연구는 탐지 및 완화 목적으로 Kali Linux를 통해 Windows Server 2016에서 Zerologon을 시뮬레이션하기 위한 통제된 환경을 구축하는 것을 목표로 했습니다. 주요 초점은 취약점 침투 테스트를 수행하고, 데스크톱 사용자로 로그인하지 않고도 데스크톱을 제어할 가능성을 보여주는 동시에 취약점을 탐지하고 완화하는 것이었습니다. 습득한 기술 Windows 이벤트 뷰어에 대한 고급 이해 Kali Linux 및 Impacket 사용 능숙도 Zerologon ...

CVE-2021-31166-Exploit

CVE-2021-31166-익스플로잇 MS Http Protocol Stack RCE 취약점 CVE-2021-31166 익스플로잇 특별히 조작된 Http 요청이 취약한 윈도우 버전을 대상으로 하면 DOS 공격이 발생합니다. 그리고 서버는 블루 스크린 오류와 함께 재부팅됩니다. Http.sys는 http 요청을 처리하고 이에 대한 응답을 생성하는 윈도우 커널 드라이버입니다. 이 취약한 http.sys 드라이버는 조작된 "Accept-Encoding" 헤더를 처리할 수 없어 충돌이 발생합니다. 결과적으로 서버가 재부팅됩니다. 블루...

CVE-2022-30136

CVE-2022-30136 Windows Network File System 원격 익스플로잇 DoS PoC PoC: https://github.com/fortra/CVE-2022-30136 세부 정보: https://www.coresecurity.com/core-l...136-windows-network-file-system-vulnerability 영향을 받는 제품 : Windows Server 2016, 2019...

2026-08 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB5120702)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2026-08 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5120418)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

August 11, 2026-KB5120702 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016

None None...

2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5099535)

2026-07 Cumulative Update for Windows Server 2016 for x64-based Systems KB5099535...

2026-07 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 (KB5101007)

2026-07 Cumulative Update for .NET Framework 4.8 for Windows Server 2016 for x64 KB5101007...

July 14, 2026-KB5101007 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016

None None...

KB5099535: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2026)

The remote Windows host is missing security update 5099535. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

2026-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5094122)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

2026-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5094122)

2026-06 Cumulative Update for Windows Server 2016 for x64-based Systems KB5094122...

Microsoft Windows Ancillary Function Driver for WinSock 竞争条件问题漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a compatibility issue vulnerability in Winsock by Microsoft Corporation. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are affected: Windows Server 2012 R2 Server Core...

Microsoft Windows Ancillary Function Driver for WinSock 竞争条件问题漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a accessibility driver for Winsock developed by Microsoft Corporation. There are vulnerabilities related to race conditions in the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit these vulnerabilities to...

Microsoft Windows Telephony Server 竞争条件问题漏洞

Microsoft Windows Telephony Server is a component of the American company Microsoft. It supports the Telephone Application Programming Interface TAPI, allowing computer programs to communicate with shared telephone services. There are vulnerabilities related to competition conditions in Microsoft...

Microsoft Windows Push Notifications 信息泄露漏洞

Microsoft Windows Push Notifications is a push notification service provided by Microsoft Corporation. It provides a reliable way to deliver new updates. However, Microsoft Windows Push Notifications has information leakage vulnerabilities. Attackers can exploit these vulnerabilities to obtain...

Microsoft Windows Deployment Services 资源管理错误漏洞

Microsoft Windows Deployment Services are a container for Windows deployment services an updated and redesigned version of Remote Installation Services RIS provided by Microsoft Corporation. These services allow for the setup of new computers through network-based unattended installations...

Microsoft Windows NTLM 日志信息泄露漏洞

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. Microsoft Windows NTLM has a vulnerability that allows for information leakage. Attackers can exploit this vulnerability to obtain sensitive information. The following products and versions are...