23117 matches found
Microsoft Tablet Windows User Interface 竞争条件问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Tablet Windows User Interface for competitive conditions. The following products and versions are affected: Windows Server, version 20H2 Server Cor...
Microsoft Windows Cluster Shared Volume 信息泄露漏洞
Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and versions are affected:Windows Server 2022,Windows Server 2022...
Microsoft Remote Desktop Client 信息泄露漏洞
Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Remote Desktop Client. The following products and editions are affected: Windows 11 for ARM64-based Systems,Windows Server 2022,Windows Server 202...
Microsoft Hyper-V 资源管理错误漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A resource management error vulnerability exists in Microsoft Hyper-V. The following products and editions are affected: Windows 10 Version 21H1 f...
Microsoft Windows Media 输入验证错误漏洞
Microsoft Windows Media Foundation is a multimedia development library from Microsoft that aims to provide a unified multimedia solution for the Windows platform, allowing developers to play video and sound files, encode audio and video, or transcode multimedia files. Developers can use Media...
KB5013952: Windows 10 Version 1607 and Windows Server 2016 Security Update (May 2022)
The remote Windows host is missing security update 5013952. It is, therefore, affected by multiple vulnerabilities - Windows LDAP Remote Code Execution Vulnerability CVE-2022-22012, CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29137, CVE-2022-29139,...
Microsoft Windows PlayToManager 竞争条件问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Windows PlayToManager. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Versio...
Microsoft Remote Desktop Client 输入验证错误漏洞
Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Remote Desktop Client. The following products and versions are affected: Windows 11 for x64-based Systems,Windows 11 for ARM64-based Systems,Remot...
May 10, 2022-KB5013868 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019
None None...
May 10, 2022 Servicing stack update (KB5014033)
None None...
May 10, 2022-KB5013625 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
None None...
Vulnerability of Windows Server operating systems, related to errors in configuring LDAP signatures within a domain, allows attackers to escalate their privileges.
The vulnerability of Windows Server operating systems is related to errors in configuring LDAP signatures within a domain. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
CVE-2021-4225
The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to prevent PHP and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovere...
CVE-2021-4225
The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to prevent PHP and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovere...
April 21, 2022-KB5012796 Cumulative Update Preview for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019
None None...
Scriptcase 9.7 - Remote Code Execution (RCE)
Exploit Title: Scriptcasr 9.7 arbitrary file upload getshell Date: 2022-04-08 Exploit Author: luckyt0mat0 Vendor Homepage: https://www.scriptcase.net/ Software Link: https://www.scriptcase.net/download/ Version: 9.7 Tested on: Windows Server 2019 Proof of Concept: POST...
Scriptcase 9.7 - Remote Code Execution Exploit
Exploit Title: Scriptcasr 9.7 arbitrary file upload getshell Exploit Author: luckyt0mat0 Vendor Homepage: https://www.scriptcase.net/ Software Link: https://www.scriptcase.net/download/ Version: 9.7 Tested on: Windows Server 2019 Proof of Concept: POST...
Microsoft Exchange Active Directory Topology 15.0.847.40 - 'Service MSExchangeADTopology' Unquoted Service Path
Exploit Title: Microsoft Exchange Active Directory Topology 15.0.847.40 - 'Service MSExchangeADTopology' Unquoted Service Path Exploit Author: Antonio Cuomo arkantolo Exploit Date: 2022-04-11 Vendor : Microsoft Version : 15.0.847.40 Tested on OS: Microsoft Exchange Server 2013 SP1 PoC :...
Microsoft Exchange Mailbox Assistants 15.0.847.40 Unquoted Service Path
Exploit Title: Microsoft Exchange Mailbox Assistants 15.0.847.40 - 'Service MSExchangeMailboxAssistants' Unquoted Service Path Exploit Author: Antonio Cuomo arkantolo Exploit Date: 2022-04-11 Vendor : Microsoft Version : 15.0.847.40 Tested on OS: Microsoft Exchange Server 2013 SP1 PoC :...
Scriptcase 9.7 Shell Upload
Exploit Title: Scriptcasr 9.7 arbitrary file upload getshell Date: 2022-04-08 Exploit Author: luckyt0mat0 Vendor Homepage: https://www.scriptcase.net/ Software Link: https://www.scriptcase.net/download/ Version: 9.7 Tested on: Windows Server 2019 Proof of Concept: POST...