Oracle Hospitality RES 3700 5.7 Remote Code Execution

Exploit Title: Oracle Hospitality RES 3700 5.7 - Remote Code Execution Date: 2019-10-01 Exploit Author: Walid Faour Vendor Homepage: https://www.oracle.com/industries/food-beverage/products/res-3700/ Software Link: N/A Available to customers Version: \ \ MDSSYSUTILS \ TransferFile \ Session \ \ '...

Microsoft Windows Task Scheduler Security Feature Bypass Vulnerability

Compass Security identified a security feature bypass vulnerability in Microsoft Windows. Due to the absence of integrity verification requirements for the RPC protocol and in particular the Task Scheduler, a man-in-the-middle attacker can relay his victim's NTLM authentication to a target of his...

Code injection

Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server. This vulnerability only impacts Windows server deployments...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2009-0229-PoC PoC for CVE-2009-0229 "Print Spooler Read Fi...

CVE-2020-12876

Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server. This vulnerability only impacts Windows server deployments...

CVE-2020-12876

CVE-2020-12876 affects Veritas APTARE on Windows, with versions prior to 10.4 allowing remote unauthenticated access to several unintended files on the server. The issue is described consistently across sources (NVD entry and Red Hat advisory), identifying Windows deployments as impacted; no expl...

Exploit for Code Injection in Apache Solr

This is a PoC exploit for CVE-2019-0193, a vulnerability in the Windows operating system. The exploit is written in C and uses the Metasploit framework to target the Windows kernel. The exploit code is not provided, but it is likely that it uses a buffer overflow vulnerability to execute arbitrar...

Microsoft Windows Graphics Device Interface Information Disclosure Vulnerability (CNVD-2020-33799)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

Microsoft Windows and Windows Server Privilege Mobilization Vulnerability (CNVD-2020-32093)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege extraction vulnerability exists in Microsoft Windows and Windows Server, which...

Microsoft Windows and Windows Server Privilege Mobilization Vulnerability (CNVD-2020-33433)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege extraction vulnerability exists in Microsoft Windows and Windows Server, which...

Microsoft Windows Runtime Privilege Mobilization Vulnerability (CNVD-2020-33435)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Runtime, which arises...

Microsoft Windows and Windows Server Privilege Mobilization Vulnerability (CNVD-2020-33421)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege vulnerability exists in Microsoft Windows and Windows Server, which stems from...

Microsoft Windows Runtime Privilege Mobilization Vulnerability (CNVD-2020-33436)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Runtime, which arises...

Microsoft Windows Runtime Privilege Mobilization Vulnerability (CNVD-2020-33438)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Runtime, which arises...

Microsoft Windows Runtime Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Runtime, which arises...

Microsoft Windows GDI Component Information Disclosure Vulnerability (CNVD-2020-46638)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in the GDI component of Microsoft Windows,...

Microsoft Windows DirectX Privilege Mobilization Vulnerability (CNVD-2020-33803)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. DirectX is one of the multimedia system libraries. A privilege vulnerability exists in...

Microsoft Windows State Repository Service Privilege Mobilization Vulnerability (CNVD-2020-33427)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege vulnerability exists in Microsoft Windows State Repository Service, which aris...

Microsoft Windows State Repository Service Privilege Mobilization Vulnerability (CNVD-2020-33429)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege vulnerability exists in Microsoft Windows State Repository Service, which aris...

Microsoft Windows Runtime Privilege Mobilization Vulnerability (CNVD-2020-33434)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows Runtime, which arises...