CVE-2018-1038: Undefined Security Weakness

The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."...

Advantech WebAccess < 8.1 - webvrpcs DrawSrv.dll Path BwBuildPath Stack-Based Buffer Overflow

Exploit for windows platform in category remote exploits !/usr/bin/python2.7 Exploit Title: Advantech WebAccess 8.1 webvrpcs DrawSrv.dll Path BwBuildPath Stack-Based Buffer Overflow RCE Date: 03-29-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.advantech.com Software Link:...

Advantech WebAccess < 8.1 - webvrpcs DrawSrv.dll Path BwBuildPath Stack-Based Buffer Overflow

!/usr/bin/python2.7 Exploit Title: Advantech WebAccess 8.1 webvrpcs DrawSrv.dll Path BwBuildPath Stack-Based Buffer Overflow RCE Date: 03-29-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.advantech.com Software Link:...

Systematic SitAware - NVG Denial of Service

Exploit Title: SitAware NVG Denial of Service Date: 03/31/2018 Exploit Author: 2u53 Vendor Homepage: https://systematic.com/defence/products/c2/sitaware/ Version: 6.4 SP2 Tested on: Windows Server 2012 R2 CVE: CVE-2018-9115 Remarks: PoC needs bottlypy: https://bottlepy.org/docs/dev/...

Advantech WebAccess webvrpcs Buffer Overflow

!/usr/bin/python2.7 Exploit Title: Advantech WebAccess 8.1 webvrpcs DrawSrv.dll Path BwBuildPath Stack-Based Buffer Overflow RCE Date: 03-29-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.advantech.com Software Link:...

Systematic SitAware - NVG Denial of Service

Systematic SitAware - NVG Denial of Service Exploit Title: SitAware NVG Denial of Service Date: 03/31/2018 Exploit Author: 2u53 Vendor Homepage: https://systematic.com/defence/products/c2/sitaware/ Version: 6.4 SP2 Tested on: Windows Server 2012 R2 CVE: CVE-2018-9115 Remarks: PoC needs bottlypy:...

KLA11219 PE vulnerability in Microsoft Products (ESU)

PE vulnerability was found in Microsoft Products Extended Support Update. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2018-1038 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware is...

Stop error 0xAB when you log off a Windows Server 2012 session

Stop error 0xAB when you log off a Windows Server 2012 session Symptoms After you install Monthly Rollup KB4088877 or Security-only update KB 4088880, you receive a Stop error 0xAB error message that resembles the following when you log off the computer: SESSIONHASVALIDPOOLONEXIT ab Important If...

Stop error 0xAB when you log off a Windows Server 2008 session

Stop error 0xAB when you log off a Windows Server 2008 session Symptoms After you install security update KB 4089344, you receive a Stop error 0xAB error message that resembles the following when you log off the computer: SESSIONHASVALIDPOOLONEXIT ab Important If you install a language pack after...

Application Security rules might not be enforced properly when multiple users simultaneously log on to the same server OS machine

When multiple session support is enabled on a Windows server OS machine, Workspace Environment Management WEM application security rules of previously logged on users are replaced by rules of a more recently logged on user. For example, if a rule is assigned to user1 but not to user2, when user2...

Acrolinx Server for Windows Path Traversal Vulnerability

Acrolinx Server for Windows is a Windows-based intelligent language analysis server from Acrolinx Germany. A path traversal vulnerability exists in versions of Acrolinx Server for Windows based platforms prior to 5.2.5. No details of the vulnerability are available at this time...

CPU usage at 100% when you move files in Windows Server 2008

CPU usage at 100% when you move files in Windows Server 2008 Symptoms After installing security update 4041995 or any other recent update that includes srv2.sys, CPU usage may spike up to 100% when you perform any type of SMB activity, such as copying files over the network. The problem is...

Microsoft Video Control Elevation of Privilege Vulnerability

Microsoft Windows Server 2008 R2 SP1 and others are a series of operating systems released by Microsoft Corporation in the U.S. Video Control is one of the video control components. A privilege vulnerability exists in Microsoft Video Control, which stems from the program's failure to properly...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2018-06798)

Microsoft Windows Server 2008 SP2 and others are a series of operating systems from Microsoft Corporation.Windows kernel is one of the operating system kernels. An information disclosure vulnerability exists in Microsoft Windows kernel, which arises from a program's failure to properly filter...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2018-06786)

Microsoft Windows Server 2008 SP2 and others are a series of operating systems from Microsoft Corporation USA.Hyper-V Network Switch is one of the network switches. A denial of service vulnerability exists in Microsoft Hyper-V Network Switch, which originates from the program failing to properly...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2018-06787)

Microsoft Windows Server 2008 SP2 and others are a series of operating systems from Microsoft Corporation.Windows kernel is one of the operating system kernels. An information disclosure vulnerability exists in Microsoft Windows kernel, which arises from a program's failure to properly filter...

Microsoft Windows Hyper-V Information Disclosure Vulnerability (CNVD-2018-06785)

Microsoft Windows Server 2008 SP2 and others are a series of operating systems from Microsoft Corporation USA.Hyper-V Network Switch is one of the network switches. An information disclosure vulnerability exists in Microsoft Hyper-V Network Switch, which originates from the program failing to...

Microsoft Windows GDI elevation of privilege vulnerability (CNVD-2018-06285)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. The Windows Graphics Device Interface GDI is one of the application program interfaces, whose main task is to be responsible for the exchange of information between the system and the graphics program...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2018-06770)

Microsoft Windows Server 2008 SP2 and others are a series of operating systems from Microsoft Corporation.Windows kernel is one of the operating system kernels. An information disclosure vulnerability exists in Microsoft Windows kernel, which arises from a program's failure to properly filter...

CVE-2018-0977

The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka "Win32k Elevation of Privilege Vulnerability"...