22321 matches found
2026-09 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5123099)
2026-09 Cumulative Update for Windows Server 2016 for x64-based Systems KB5123099...
2026-09 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5126148)
2026-09 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 KB5126148...
Explotacion-RCE-Pentesting-BlueKeep-CVE-2019-0708-
在受控环境中利用 BlueKeep 漏洞（CVE-2019-0708） 本项目为学术性质，专注于在 Windows Server 2008 R2 的 RDP 服务中利用 BlueKeep（CVE-2019-0708） 漏洞期间的分析、执行与故障排查，为 Instituto Profesional Los Leones 的网络安全课程所开发。 目标 展示在虚拟化环境中从使用 Nmap 进行初步侦察，到通过 Metasploit/Meterpreter 提权并与目标系统交互的完整渗透测试流程。 环境与工具 攻击机： Kali Linux x64 受害机： Windows Server 200...
Windows Server Elevation of Privilege Vulnerability
Use after free in Windows Server allows an authorized attacker to elevate privileges locally...
Windows Server Update Service - Insecure Deserialization
Windows Server Update Service contains an insecure deserialization vulnerability caused by deserialization of untrusted data. An unauthorized attacker with network access can exploit this to execute arbitrary code remotely, potentially leading to full system compromise. id: CVE-2025-59287 info:...
ThrottleStopPPL
ThrottleStopPPL Windows Server 2022 上の Protected Process Light PPL 保護レベルを管理するための概念実証ツールです。ThrottleStop ドライバの脆弱性（CVE-2025-7771）を悪用します。 概要 このツールは、ThrottleStop ドライバによって公開された任意の物理メモリ読み取り/書き込み機能を介した特権昇格を示します。カーネルメモリ構造を直接操作することで、プロセス保護レベルの変更を可能にします。 特徴 任意の物理メモリ読み取り/書き込み Superfetch を介した仮想アドレスから物理アドレスへの変...
KB5122871: Windows Server 2025 Security Update (September 2026)
The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
KB5123099: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2026)
The remote Windows host is missing security update 5123099. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
KB5123065: Windows Server 2012 Security Update (September 2026)
The remote Windows host is missing security update 5123065. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
KB5122882: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2026)
The remote Windows host is missing security update 5122882. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
KB5123066: Windows Server 2012 R2 Security Update (September 2026)
The remote Windows host is missing security update 5123066. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
EternalRomance-Exploit-Against-Windows-Machine
Overview EternalRomance is a critical Windows remote code execu...
Exploit for CVE-2020-0609
RD Gateway BlueGate Validator CVE-2020-0609 / CVE-2020-06...
CVE-2026-75604
Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do not consistently escape backslashes in route segments before constructing...
Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.21.2 product release
The components for Red Hat OpenShift for Windows Containers 10.21.2 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...
Windows Server 2003 & IIS 6.0 - Remote Code Execution
Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in the ScStoragePathFromUrl function in the WebDAV service that could allow remote attackers to execute arbitrary code via a long header beginning with "If http://" in a PROPFIND...
CVE-2026-44629
Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances SV-100E and SV-300E series and Synergis Softwire installed on Windows servers...
CVE-2026-44629
Genetec Streamvault all-in-one appliances (SV-100E and SV-300E series) and Synergis Softwire installed on Windows servers are affected by an improper access control vulnerability in the Synergis Softwire installation folder. A local attacker with low privileges can exploit this to achieve high co...
CVE-2026-44629
Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one appliances SV-100E and SV-300E series and Synergis Softwire installed on Windows servers...