23453 matches found
KB5000859: Servicing stack update for Windows 10, version 1809: March 9, 2021
None None...
KB5000908: Servicing stack update for Windows 10, version 1909: March 9, 2021
None None...
Microsoft Windows User Profile Service 后置链接漏洞
Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A backlink vulnerability exists in Microsoft Windows User Profile Service. The following products and...
Microsoft Windows NAT 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Windows NAT. The following products and editions are affected:Windows 10 Version 1803 for x64-based Systems,Windows 10 Version 1809 for x64-based...
KB5000853: Windows 8.1 and Windows Server 2012 R2 March 2021 Security Update
The remote Windows host is missing security update 5000853 or cumulative update 5000848. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
KB5000851: Windows 7 and Windows Server 2008 R2 March 2021 Security Update
The remote Windows host is missing security update 5000851 or cumulative update 5000841. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
KB5000840: Windows Server 2012 March 2021 Security Update
The remote Windows host is missing security update 5000840 or cumulative update 5000847. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
KB5000856: Windows Server 2008 March 2021 Security Update
The remote Windows host is missing security update 5000856 or cumulative update 5000844. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Microsoft Windows RRAS Service MIBEntryGet Overflow Exploit
This Metasploit module exploits an overflow in the Windows Routing and Remote Access Service RRAS to execute code as SYSTEM. The RRAS DCERPC endpoint is accessible to unauthenticated users via SMBv1 browser named pipe on Windows Server 2003 and Windows XP hosts; however, this module targets Windo...
Microsoft Windows RRAS Service MIBEntryGet Overflow
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Windows RRAS Service MIBEntryGet Overflow', 'Description' = %q This module exploits an overflow in the Windows Routing and Remote Acces...
KB5001401: Servicing stack update for Windows Server 2012: April 13, 2021
KB5001401: Servicing stack update for Windows Server 2012: April 13, 2021 This update applies to the following: Windows Server 2012 for x86-based systems Windows Server 2012 for x64-based systems Windows Server 2012 Server Core installation Summary This update makes quality improvements to the...
KB5001403: Servicing stack update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: April 13, 2021
KB5001403: Servicing stack update for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: April 13, 2021 This update applies to the following: Windows 8.1 for 32-bit systems Windows 8.1 for x64-based systems Windows RT 8.1 Windows Server 2012 R2 Windows Server 2012 R2 Server Core installatio...
Microsoft brings advanced hardware security to Server and Edge with Secured-core
A cursory look at recent headlines reveals two clear trends. First, organizations around the world are embracing digital transformation using technologies across cloud and edge computing to better serve their customers and thrive in fast-paced environments. Second, attackers are constantly...
Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62486)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation U.S. Microsoft Windows is an operating system for personal devices Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in the Microsoft Windows/Windows Server...
HFS (HTTP File Server) 2.3.x Remote Code Execution
Exploit Title: HFS HTTP File Server 2.3.x - Remote Command Execution 3 Google Dork: intext:"httpfileserver 2.3" Date: 20/02/2021 Exploit Author: Pergyz Vendor Homepage: http://www.rejetto.com/hfs/ Software Link: https://sourceforge.net/projects/hfs/ Version: 2.3.x Tested on: Microsoft Windows...
Perfusion - Exploit For The RpcEptMapper Registry Key Permissions Vulnerability (Windows 7 / 2088R2 / 8 / 2012)
On Windows 7 , Windows Server 2008R2 , Windows 8 , and Windows Server 2012 , the registry key of the RpcEptMapper and DnsCache 7/2008R2 only services is configured with weak permissions. Any local user can create a Performance subkey and then leverage the WindowsPerformance Counters to load an...
Windows Server 2012 SrClient DLL hijacking
All editions of Windows Server 2012 but not 2012 R2 are vulnerable to DLL hijacking due to the way TiWorker.exe will try to call the non-existent SrClient.dll file when Windows Update checks for updates. This issue can be leveraged for privilege escalation if %PATH% includes directories that are...
Microsoft Pulls Bad Windows Update After Patch Issue
Microsoft has removed a faulty servicing stack update, which was causing issues for Windows users when they tried to install last week’s Patch Tuesday security updates. Microsoft’s servicing stack update provides fixes for the component that installs Windows updates. This particular defective...