Security
Headlines
HeadlinesLatestCVEs

Tag

#windows

Microsoft Windows Kernel Security Descriptor Use-After-Free

The Microsoft Windows Kernel CmDeleteLayeredKey may delete predefined tombstone keys, leading to security descriptor use-after-free.

Packet Storm
#windows#microsoft
Microsoft Windows Kernel Unsafe Reference

The Microsoft Windows Kernel may reference rolled-back transacted keys through differencing hives.

Microsoft Windows Kernel Unsafe Reference

The Microsoft Windows Kernel may reference unbacked layered keys through registry virtualization.

Microsoft Windows Kernel Arbitrary Read

There is a Microsoft Windows Kernel arbitrary read that can be performed by accessing predefined keys through differencing hives.

Dynamic Journal CMS 2.5 Database Disclosure

Dynamic Journal CMS version 2.5 suffers from a database disclosure vulnerability.

e2 Distr CMS 2.8.5.3 Backup Disclosure

e2 Distr CMS version 2.8.5.3 appears to leave backups in a world accessible directory under the document root.

DMIS:CRI LMS 2.0 SQL Injection

DMIS:CRI LMS version 2.0 suffers from a remote SQL injection vulnerability.

Discussion On Kontackt 1.18 Cross Site Scripting

Discussion On Kontackt The Exclusive PHP Social Network Platform version 1.18 suffers from a cross site scripting vulnerability.

Digisha CMS 1.2.7 SQL Injection

Digisha CMS version 1.2.7 suffers from a remote SQL injection vulnerability that allows for authentication bypass.