Microsoft Windows Subsystem for Linux CVE-2018-8337 Local Security Bypass Vulnerability

Description Microsoft Windows Subsystem for Linux is prone to a local security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 version 170...

Microsoft Windows SMB Server CVE-2018-8444 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems...

KB4457143: Windows 8.1 and Windows Server 2012 R2 September 2018 Security Update

The remote Windows host is missing security update 4457143 or cumulative update 4457129. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could...

KB4457128: Windows 10 Version 1803 and Windows Server Version 1803 September 2018 Security Update

The remote Windows host is missing security update 4457128. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way...

KB4457145: Windows 7 and Windows Server 2008 R2 September 2018 Security Update

The remote Windows host is missing security update 4457145 or cumulative update 4457144. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could...

PT-2018-1565

Name of the Vulnerable Software and Affected Versions Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers Description A denial of service issue exists in the Microsoft Server Block Message SMB due to insufficient input validation...

Microsoft Windows Hyper-V CVE-2018-8439 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the host operating system. Failed exploit attempts will result in a denial of service condition. Technologies Affected Microsoft Hyper-V...

PT-2018-1542

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers Description A remote code execution issue exists due to insufficient...

PT-2018-1650

Name of the Vulnerable Software and Affected Versions Microsoft Server Message Block 2.0 SMBv2 versions prior to the fixed version, affecting Windows Server 2012, Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012 R2. Description The issue is related to how the SMBv2 server handles...

KB4457140: Windows Server 2012 September 2018 Security Update

The remote Windows host is missing security update 4457140 or cumulative update 4457135. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could...

KB4457984: Windows Server 2008 September 2018 Security Update

The remote Windows host is missing security update 4457984 or cumulative update 4458010. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory. ...

Microsoft Windows Kernel CVE-2018-8455 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...

Microsoft Windows 'Win32k.sys' Graphics CVE-2018-8332 Remote Code Execution Vulnerability

Description Microsoft Windows kernel is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Technologies Affected Microsoft...

Microsoft Windows Hyper-V CVE-2018-8434 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...

PT-2018-1654

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description A security feature bypass issue exists due to incorrect validation of untrusted files by Device Guard, allowing attackers to bypass security restrictions using a specially crafted...

PT-2018-1657

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description The issue is related to the DirectX Graphics Kernel DXGKRNL driver improperly handling objects in memory. This can allow an attacker to run processes with elevated privileges...

PT-2018-1646

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description A security feature bypass issue exists due to the Windows Hyper-V BIOS loader's failure to provide a high-entropy source. This allows a remote attacker to bypass built-in security...

PT-2018-1656

Name of the Vulnerable Software and Affected Versions Windows Server 2012 R2 Windows RT 8.1 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers Description The issue is related to how the Windows Kernel handles objects in memory. It allows attackers to affect the system by potentially...

Soroush IM Desktop App 0.17.0 - Authentication Bypass Vulnerability

Exploit for windows platform in category local exploits Exploit Title: Soroush IM Desktop App 0.17.0 - Authentication Bypass Exploit Author: VortexNeoX64 Vendor Homepage: https://soroush-app.ir Software Link: http://54.36.43.176/SoroushSetup0.17.0.exe Version: 0.17.0 BETA Tested on: Windows 10 18...

ThinkCMF Arbitrary File Deletion Vulnerability

ThinkCMF is a CMS Content Management System based on ThinkPHP. An arbitrary file deletion vulnerability exists in the 'doavatar' function in the \application\User\Controller\ProfileController.class.php file in ThinkCMF version X2.2.3. An attacker can delete arbitrary files with the help of the...