DiskBoss Enterprise GET Buffer Overflow Exploit

This Metasploit module exploits a stack-based buffer overflow vulnerability in the web interface of DiskBoss Enterprise v7.5.12 and v7.4.28, caused by improper bounds checking of the request path in HTTP GET requests sent to the built-in web server. This Metasploit module has been tested...

Mozilla Firefox Use-After-Free

-- body background-color:lime; font-color:red; ; / Mozilla Firefox 50.1.0 Use-After-Free POC Author: Marcin Ressel Date: 13.01.2017 Vendor Homepage: www.mozilla.org Software Link: https://ftp.mozilla.org/pub/firefox/releases/50.0.2/ Version: 50.1.0 Tested on: Windows 7 x64 Firefox 32 && 64 bit CV...

Mozilla Firefox 50.1.0 - Use-After-Free

Mozilla Firefox 50.1.0 - Use-After-Free -- body background-color:lime; font-color:red; ; / Mozilla Firefox 50.1.0 Use-After-Free POC Author: Marcin Ressel Date: 13.01.2017 Vendor Homepage: www.mozilla.org Software Link: https://ftp.mozilla.org/pub/firefox/releases/50.0.2/ Version: 50.1.0 Tested o...

Mozilla Firefox < 50.1.0 - Use-After-Free

-- body background-color:lime; font-color:red; ; / Mozilla Firefox 50.1.0 Use-After-Free POC Author: Marcin Ressel Date: 13.01.2017 Vendor Homepage: www.mozilla.org Software Link: https://ftp.mozilla.org/pub/firefox/releases/50.0.2/ Version: 50.1.0 Tested on: Windows 7 x64 Firefox 32 && 64 bit CV...

EMET 5.52 update is now available

EMET 5.52 is the latest version of the Enhanced Mitigation Experience Toolkit EMET and is now available for download. EMET 5.52 is a minor update from EMET 5.51 to address the following: An issue with the EAF mitigation that causes some applications to hang on Windows 7 SP1. A fix to the MSI...

EMET 5.52 update is now available

EMET 5.52 is the latest version of the Enhanced Mitigation Experience Toolkit EMET and is now available for download. EMET 5.52 is a minor update from EMET 5.51 to address the following: An issue with the EAF mitigation that causes some applications to hang on Windows 7 SP1. A fix to the MSI...

New Variant of Ploutus ATM Malware Observed in the Wild in Latin America

Introduction Ploutus is one of the most advanced ATM malware families we’ve seen in the last few years. Discovered for the first time in Mexico back in 2013, Ploutus enabled criminals to empty ATMs using either an external keyboard attached to the machine or via SMS message, a technique that had...

CVE-2017-0004

The Local Security Authority Subsystem Service LSASS in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to cause a denial of service reboot via a crafted authentication request, aka "Local Security Authority Subsystem Service Denial of...

CVE-2017-0004

The CVE-2017-0004 entry describes a remote Denial of Service affecting the Local Security Authority Subsystem Service (LSASS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. A crafted authentication request can trigger an LSASS reboot, effectively taking the target sy...

January 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

January 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security update resolves the following vulnerabilities in Windows: MS17-004 Security Update for Local Security Authority Subsystem Service 3216771 This security update also includes...

January 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1

January 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security update resolves the following vulnerabilities in Windows: MS17-004 Security Update for Local Security Authority Subsystem Service 3216771 More Information Important The security fixes...

KLA11903 DoS vulnerability in Microsoft Products (ESU)

A denial of service vulnerability was found in Microsoft Products Extended Support Update. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2017-0004 Related products Microsoft-Windows-Vista-4 Microsoft-Windows-7 Microsoft-Windows-Server-2008 CVE...

KLA10941 Denial of service vulnerability in Microsoft Windows

An improper handling of authentication requests in the Local Security Authority Subsystem Service LSASS was found in Windows Vista Service Pack 2, Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1 and Windows 7 Service Pack 1. By exploiting this vulnerability malicious use...

Enigma Fileless UAC Bypass Exploit

This Metasploit module is an implementation of fileless uac bypass using cmd.exe instead of powershell.exe OJ msf module. This module will create the required registry entry in the current user's hive, set the default value to whatever you pass via the EXECCOMMAND parameter, and runs eventvwr.exe...

Description of the cumulative update package for Office Communications Server 2007 R2, Communicator Web Access: April 2010

Describes the issue that is fixed in the Office Communications Server 2007 R2, Communicator Web Access update package that is dated April 2010.SummaryThis article describes the Microsoft Office Communications Server 2007 R2, Microsoft Office Communicator Web Access issues that are fixed in the...

MS15-101: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 8, 2015

MS15-101: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework that could...

MS15-080: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: August 11, 2015

MS15-080: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: August 11, 2015 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework and...

MS12-074: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: November 13, 2012

MS12-074: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: November 13, 2012 View products that this article applies to.Microsoft has released the security bulletin MS12-074. You can view the complete security...

MS12-074: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: November 13, 2012

MS12-074: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: November 13, 2012 View products that this article applies to.Microsoft has released the security bulletin MS12-074. You can view the complete security bulletin by going to one of the...

MS13-007: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: January 8, 2013

MS13-007: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: January 8, 2013 View products that this article applies to. Introduction Microsoft has released security bulletin MS13-007. You can view the complete security bulletin by going to on...