Security
Headlines
HeadlinesLatestCVEs

Tag

#windows

CVE-2022-30133

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-35744.

CVE
#vulnerability#windows#rce
CVE-2022-30197

Windows Kernel Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-34708.

CVE-2022-35767

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2022-34702, CVE-2022-34714, CVE-2022-35745, CVE-2022-35752, CVE-2022-35753, CVE-2022-35766, CVE-2022-35794.

CVE-2022-34709

Windows Defender Credential Guard Security Feature Bypass Vulnerability.

CVE-2022-34690

Windows Fax Service Elevation of Privilege Vulnerability.

CVE-2022-34708

Windows Kernel Information Disclosure Vulnerability. This CVE ID is unique from CVE-2022-30197.

Abusing Kerberos for Local Privilege Escalation

Upcoming Black Hat USA presentation will examine the implications of Kerberos weaknesses for security on the local machine.

Education hammered by exploits and backdoors in 2021 and 2022

Categories: News Categories: Threat Intelligence Tags: Education Beyond spikes in detections, the education sector has dealt with an onslaught of attacks ranging from spyware and denial of service tools to ransomware. (Read more...) The post Education hammered by exploits and backdoors in 2021 and 2022 appeared first on Malwarebytes Labs.

Feehi CMS 2.1.1 Cross Site Scripting

Feehi CMS version 2.1.1 suffers from a persistent cross site scripting vulnerability.

Backdoor.Win32.Guptachar.20 MVID-2022-0631 Insecure Credential Storage

Backdoor.Win32.Guptachar.20 malware suffers from an insecure credential storage vulnerability.