23494 matches found
August 11, 2026-KB5121645 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019
None None...
KB5120385: Windows Server 2012 R2 Security Update (August 2026)
The remote Windows host is missing security update 5120385. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-62878 - Use after free in Windows Deployment Services allows an...
KB5120386: Windows Server 2012 Security Update (August 2026)
The remote Windows host is missing security update 5120386. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-62878 - Use after free in Windows Deployment Services allows an...
August 11, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5121649)
None None...
August 11, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5121648)
None None...
Network driver Windows Server Code Execution
The vulnerability of the Windows Server operating system’s network driver is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Windows Server Update Service Network Change
The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...
Wiz Brings Automated DISA STIG Assessment to Amazon Linux 2023 and Windows Server 2025
Automating DISA STIG Compliance for Amazon Linux 2023 and Windows Server 2025, giving defense and federal teams immediate and continuous hardening validation...
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an executable to disk. They fed Java source code to the database, let Oracle compile it into stored schema objects, an...
Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 7.0.1 release and security update
Red Hat JBoss Web Server 7.0.1 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CV...
wazuh-iis-defense
Guia de Configuração — Monitoramento IIS com Wazuh + Sysmon...
Exploit for Improper Authorization in Microsoft
CertiGhost CVE-2026-54121 - AD CS Chase Fallback Exploit Too...
Tianwen-ERP-Upload-PoC
Tianwen Property ERP — Unauthenticated File Upload CVE: P...
Important: Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.22.1 product release
The components for Red Hat OpenShift for Windows Containers 10.22.1 are now available Red Hat OpenShift for Windows Containers allows you to deploy Windows container workloads running on Windows Server containers...
Windows 11 24H2/25H2 | Server 2025 - Recovery Media Restore Fails with: The Local Security Authority cannot be contacted
Issue Resolved in September 8 2026 Windows Updates The underlying issue documented in this article was resolved by Microsoft in the September 8 2026 security updates for Windows 11 KB5124008 and Windows Server 2025 KB5122871. After applying the update, the Veeam Recovery Media must be recreated...
SMB Server Privilege Escalation
The vulnerability of the SMB Server component of the Windows operating system is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2026-40952 Privilge misconfiguration in Secure Access installers
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...
CVE-2026-40952: Incorrect Default Permissions
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...
Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
