10439 matches found
QBot Malware Exploiting Windows Calculator to Compromise Devices
By Deeba Ahmed According to researcher "ProxyLife" on Twitter, QBot malware, aka QakBot, has been exploiting the Windows 7 Calculator app… This is a post from HackRead.com Read the original post: QBot Malware Exploiting Windows Calculator to Compromise Devices...
July 12, 2022—KB5015862 (Security-only update)
None None...
July 12, 2022—KB5015861 (Monthly Rollup)
None None...
KB5016057: Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: July 12, 2022
KB5016057: Servicing stack update for Windows 7 SP1 and Server 2008 R2 SP1: July 12, 2022 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servici...
KB5015862: Windows 7 and Windows Server 2008 R2 Security Update (July 2022)
The remote Windows host is missing security update 5015862 or cumulative update 5015866. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
June 14, 2022—KB5014748 (Monthly Rollup)
None None...
June 14, 2022—KB5014742 (Security-only update)
None None...
Real Player v.20.0.8.310 G2 Control - DoGoToURL() Remote Code Execution Exploit
Exploit Title: Real Player v.20.0.8.310 G2 Control - 'DoGoToURL' Remote Code Execution RCE Exploit Author: Eduardo Braun Prado Vendor Homepage: http://real.com/ Software Link: http://real.com/ Version: v.20.0.8.310 Tested on: Windows 7, 8.1, 10 CVE : N/A Full PoC:...
KB5014742: Windows 7 and Windows Server 2008 R2 Security Update (June 2022)
The remote Windows host is missing security update 5014742. It is, therefore, affected by multiple vulnerabilities - Windows Lightweight Directory Access Protocol LDAP Remote Code Execution Vulnerability CVE-2022-30141, CVE-2022-30143, CVE-2022-30146, CVE-2022-30149, CVE-2022-30153, CVE-2022-3016...
Microsoft Windows 信息泄露漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. The vulnerability stems from a security issue with some Intel processors. The following products and versions are...
Real Player v.20.0.8.310 G2 Control - 'DoGoToURL()' Remote Code Execution (RCE)
Exploit Title: Real Player v.20.0.8.310 G2 Control - 'DoGoToURL' Remote Code Execution RCE Google Dork: n/a Date: May 31, 2022 Exploit Author: Eduardo Braun Prado Vendor Homepage: http://real.com/ Software Link: http://real.com/ Version: v.20.0.8.310 Tested on: Windows 7, 8.1, 10 CVE : N/A Full...
Security Updates for Microsoft Excel Products C2R (April 2022)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-24473, CVE-2022-26901...
Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability
UPDATE July 12, 2022: As part of the response by Microsoft, a defense in depth variant has been found and fixed in the Windows July cumulative updates. Microsoft recommends installing the July updates as soon as possible. Windows Version Link to KB article LInk to Catalog Windows 8.1, Windows...
Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability
UPDATE July 12, 2022: As part of the response by Microsoft, a defense in depth variant has been found and fixed in the Windows July cumulative updates. Microsoft recommends installing the July updates as soon as possible. Windows Version Link to KB article LInk to Catalog Windows 8.1, Windows...
KLA12550 RCE vulnerability in Microsoft Products (ESU)
A remote code execution vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2022-30190 Exploitation Public exploits exist for this vulnerability. Malware exists for this...
Emby Media Server 4.7.0.60 Cross Site Scripting Vulnerability
Exploit Title: Emby Media Server 4.7.0.60 Cross Site Scripting Exploit Author: Yehia Elghaly Vendor Homepage: https://emby.media/ Software Link: https://emby.media/windows-server.html Version: 4.7.0.60 Tested on: Windows 7 / 10 Summary: Emby formerly Media Browser is a media server designed to...
May 10, 2022—KB5013999 (Security-only update)
None None...
May 10, 2022—KB5014012 (Monthly Rollup)
None None...
Prime95 Version 30.7 build 9 - Remote Code Execution Exploit
Exploit Title: Prime95 Version 30.7 build 9 - Remote Code Execution RCE Discovered by: Yehia Elghaly Vendor Homepage: https://www.mersenne.org/ Software Link : https://www.mersenne.org/ftproot/gimps/p95v307b9.win32.zip Tested Version: 30.7 build 9 Vulnerability Type: Buffer Overflow RCE Local...
KLA12532 Elevation of privilege in Microsoft Products (ESU)
Elevation of privilege was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-30138 Related products Microsoft-Windows Microsoft-Windows-Server Microsoft-Windows-7 Microsoft-Windows-Server-2008 CVE...