KB5005094: Windows Server 2012 Security Update (August 2021)

The remote Windows host is missing security update 5005094 or cumulative update 5005099. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-26425, CVE-2021-26426, CVE-2021-34483,...

Microsoft Windows Update Assistant 安全漏洞

Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Update Assistant. The following products and versions are affected: Windows 10 Version 21H1 for ARM64-based Systems, Windows 10 Version 21H1 for 32-bit...

Microsoft Windows Event Tracing 权限许可和访问控制问题漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to privilege permission and access control issues. The...

Microsoft Windows Event Tracing 资源管理错误漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism to track and log events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to a resource management error. The following products and...

Microsoft Windows MSHTML Platform 代码注入漏洞

Microsoft Windows MSHTML Platform is an application from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows MSHTML Platform. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

Microsoft Windows Print Spooler Components 代码注入漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Print Spooler Components. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windo...

Microsoft Windows Cryptographic Services 信息泄露漏洞

Microsoft Windows Cryptographic Services is an encryption service provider program from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Cryptographic Services. The following products and versions are affected:Windows 10 Version 1809 for 32-bit...

August 10, 2021-KB5004752 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

None None...

KB5005095: Windows Server 2008 Security Update (August 2021)

The remote Windows host is missing security update 5005095 or cumulative update 5005090. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

KB5005030: Windows 10 Version 1809 and Windows Server 2019 Security Update (August 2021)

The remote Windows host is missing security update 5005030. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-26424, CVE-2021-26432,...

Microsoft Windows 后置链接漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows. The following products and editions are affected:Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-base...

Exploit for Classic Buffer Overflow in Microsoft

PoC exploit for CVE-2017-7269, a buffer overflow vulnerability in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services IIS 6.0 in Microsoft Windows Server 2003 R2. The exploit is implemented as a Metasploit module, which can be used to execute arbitrary code vi...

Exploit for SQL Injection in Virtuasoftware Cobranca

My CVEs Collection of PoC to my C...

TripSpark VEO Transportation - Blind SQL Injection

Exploit Title: TripSpark VEO Transportation - 'editOEN' Blind SQL Injection Google Dork: inhtml:"Student Busing Information" Date: 07/27/2021 Exploit Author: Sedric Louissaint @LKn0w Vendor Homepage: https://www.tripspark.com Software Document Link:...

How to use Secure LDAP to Change the User Password in NetScaler Gateway

This article provides information on how to use Lightweight Directory Access Protocol LDAP in NetScaler Gateway to change the users passwords. However, Secure LDAP is required to change the password. Note : Windows Server global catalog port 3268 or secure global catalog port 3269 do not support...

KB5005390: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows Server 2008 SP2

KB5005390: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows Server 2008 SP2 Summary This update addresses the following issue: Temporarily addresses an issue with devices that do not comply with section 3.2.1 of the RFC 4556 specification,...

KLA12244 Microsoft Advisory for Active Directory Certificate Services

Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Windows servers.To prevent NTLM Relay Attacks on networks with NTLM enabled, domain administrators must ensure that services that permit NTLM authentication make use of protections...

KLA12248 Microsoft Advisory (ESU) for Active Directory Certificate Services

Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Microsoft Products Extended Security Update.To prevent NTLM Relay Attacks on networks with NTLM enabled, domain administrators must ensure that services that permit NTLM authenticati...

KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2

KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2 Summary This update addresses the following issue: Temporarily addresses an issue with devices that do not comply with section 3.2.1 of the RFC 4556...

CVE-2021-32776

Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.4, CSRF tokens can be reused by a malicious user, as on Windows servers no cleanup is done on CSRF tokens. This issue is fixed in versions 2.7.4 and 3.0.0...