22288 matches found
Microsoft Windows PlayToManager 竞争条件问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Windows PlayToManager. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Versio...
Microsoft Remote Desktop Client 信息泄露漏洞
Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Remote Desktop Client. The following products and editions are affected: Windows 11 for ARM64-based Systems,Windows Server 2022,Windows Server 202...
KB5013952: Windows 10 Version 1607 and Windows Server 2016 Security Update (May 2022)
The remote Windows host is missing security update 5013952. It is, therefore, affected by multiple vulnerabilities - Windows LDAP Remote Code Execution Vulnerability CVE-2022-22012, CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29137, CVE-2022-29139,...
Microsoft Windows Cluster Shared Volume 竞争条件问题漏洞
Microsoft Windows Cluster Shared Volume is a general-purpose cluster file system from Microsoft Corporation USA. A competitive conditions issue vulnerability exists in Microsoft Windows Cluster Shared Volume CSV. The following products and editions are affected:Windows Server 2019,Windows Server...
KB5013944: Windows Server 2022 Security Update (May 2022)
The remote Windows host is missing security update 5013944. It is, therefore, affected by multiple vulnerabilities - Windows LDAP Remote Code Execution Vulnerability CVE-2022-22012, CVE-2022-22013, CVE-2022-22014, CVE-2022-29128, CVE-2022-29129, CVE-2022-29130, CVE-2022-29131, CVE-2022-29137,...
May 10, 2022 Servicing stack update (KB5014033)
None None...
May 10, 2022-KB5013625 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
None None...
May 10, 2022-KB5013868 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019
None None...
Vulnerability of Windows Server operating systems, related to errors in configuring LDAP signatures within a domain, allows attackers to escalate their privileges.
The vulnerability of Windows Server operating systems is related to errors in configuring LDAP signatures within a domain. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
CVE-2021-4225
The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to prevent PHP and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovere...
CVE-2021-4225
The SP Project & Document Manager WordPress plugin before 4.24 allows any authenticated users, such as subscribers, to upload files. The plugin attempts to prevent PHP and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovere...
April 21, 2022-KB5012796 Cumulative Update Preview for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019
None None...
Scriptcase 9.7 - Remote Code Execution (RCE)
Exploit Title: Scriptcasr 9.7 arbitrary file upload getshell Date: 2022-04-08 Exploit Author: luckyt0mat0 Vendor Homepage: https://www.scriptcase.net/ Software Link: https://www.scriptcase.net/download/ Version: 9.7 Tested on: Windows Server 2019 Proof of Concept: POST...
Scriptcase 9.7 - Remote Code Execution Exploit
Exploit Title: Scriptcasr 9.7 arbitrary file upload getshell Exploit Author: luckyt0mat0 Vendor Homepage: https://www.scriptcase.net/ Software Link: https://www.scriptcase.net/download/ Version: 9.7 Tested on: Windows Server 2019 Proof of Concept: POST...
Microsoft Exchange Active Directory Topology 15.0.847.40 - 'Service MSExchangeADTopology' Unquoted Service Path
Exploit Title: Microsoft Exchange Active Directory Topology 15.0.847.40 - 'Service MSExchangeADTopology' Unquoted Service Path Exploit Author: Antonio Cuomo arkantolo Exploit Date: 2022-04-11 Vendor : Microsoft Version : 15.0.847.40 Tested on OS: Microsoft Exchange Server 2013 SP1 PoC :...
Scriptcase 9.7 Shell Upload
Exploit Title: Scriptcasr 9.7 arbitrary file upload getshell Date: 2022-04-08 Exploit Author: luckyt0mat0 Vendor Homepage: https://www.scriptcase.net/ Software Link: https://www.scriptcase.net/download/ Version: 9.7 Tested on: Windows Server 2019 Proof of Concept: POST...
Microsoft Exchange Mailbox Assistants 15.0.847.40 Unquoted Service Path
Exploit Title: Microsoft Exchange Mailbox Assistants 15.0.847.40 - 'Service MSExchangeMailboxAssistants' Unquoted Service Path Exploit Author: Antonio Cuomo arkantolo Exploit Date: 2022-04-11 Vendor : Microsoft Version : 15.0.847.40 Tested on OS: Microsoft Exchange Server 2013 SP1 PoC :...
Shhhloader - SysWhispers Shellcode Loader
Shhhloader is a SysWhispers Shellcode Loader that is currently a Work in Progress. It takes raw shellcode as input and compiles a C++ stub that has been integrated with SysWhispers in order to bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed. T...