CVE-2024-31756

The CVE-2024-31756 entry affects MarvinTest Solutions Hardware Access Driver, specifically version 5.0.3.0 and earlier. The root cause is an issue in the Hw65.sys component that enables local privilege escalation. The issue is mitigated by upgrading to version 5.0.4.0; PT-2024-24197 also notes a ...

CVE-2021-47376

In the Linux kernel, the following vulnerability has been resolved: bpf: Add oversize check before call kvcalloc Commit 7661809d493b "mm: don't allow oversized kvmalloc calls" add the oversize check. When the allocation is larger than what kmalloc supports, the following warning triggered: WARNIN...

TeraByte Unlimited Image for Windows 安全漏洞

TeraByte Unlimited Image for Windows is a computer backup and recovery solution from TeraByte Unlimited. A security vulnerability exists in TeraByte Unlimited Image for Windows v.3.64.0.0 and earlier versions, which originates from a vulnerability that allows a local attacker to escalate privileg...

MarvinTest Solutions Hardware Access Driver 安全漏洞

MarvinTest Solutions Hardware Access Driver is a hardware access driver from MarvinTest Solutions, USA. A security vulnerability exists in MarvinTest Solutions Hardware Access Driver v.5.0.3.0 and prior versions, which originates from a vulnerability that allows a local attacker to escalate...

PT-2024-24197 · Marvintest Solutions · Marvintest Solutions Hardware Access Driver

Name of the Vulnerable Software and Affected Versions: MarvinTest Solutions Hardware Access Driver versions 5.0.3.0 and before Description: An issue in the Hardware Access Driver allows a local attacker to escalate privileges via the Hw65.sys component. Recommendations: For versions 5.0.3.0 and...

CVE-2024-3745

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-3745 MSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-3745 MSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-3745

MSI Afterburner v4.6.6.16381 Beta 3 is affected by an ACL Bypass in the RTCore64.sys driver, enabling escalation from a low-privilege user and potentially triggering CVE-2024-1443 and CVE-2024-1460. The CVE entry is supported by multiple sources (NVD, CVE lists) with CVSSv3.1 metrics showing LOCA...

CVE-2024-29513

An issue in briscKernelDriver.sys in BlueRiSC WindowsSCOPE Cyber Forensics before 3.3 allows a local attacker to execute arbitrary code within the driver and create a local denial-of-service condition due to an improper DACL being applied to the device the driver creates...

CVE-2024-4594

A vulnerability, which was classified as problematic, was found in DedeCMS 5.7. Affected is an unknown function of the file /src/dede/syssafe.php. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

CVE-2024-4591

A vulnerability classified as problematic has been found in DedeCMS 5.7. This affects an unknown part of the file /src/dede/sysgroupadd.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may b...

CVE-2024-4592

A vulnerability classified as problematic was found in DedeCMS 5.7. This vulnerability affects unknown code of the file /src/dede/sysgroupedit.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2024-4590

A vulnerability was found in DedeCMS 5.7. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /src/dede/sysinfo.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the publ...

Desdev DedeCMS 跨站请求伪造漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Desdev Network Desdev. The system has content publishing, content management, content editing and content retrieval functions. A cross-site request forgery vulnerability...

PT-2024-31843 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7 Description: A vulnerability was found in DedeCMS, affecting some unknown functionality of the file /src/dede/sys info.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...

PT-2024-25803 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions prior to 1.43 Description: The Deno sandbox may be unexpectedly weakened by allowing file read/write access to privileged files in various locations on Unix and Windows platforms. For example, reading /proc/self/environ may...

CVE-2023-34277

D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-2150 routers. Although authentication is required to exploit this...

D-Link DIR-X3260 安全漏洞

D-Link DIR-X3260 is a Wi-Fi 6 router from China-based D-Link. A security vulnerability exists in the D-Link DIR-X3260 that stems from a remote code execution vulnerability in the SetSysEmailSettings SMTPServerAddress command injection...

PT-2024-22450 · Microworld Technologies · Escan Antivirus

Name of the Vulnerable Software and Affected Versions: MicroWorld Technologies Inc eScan Antivirus version 4.0.0.49 Description: A kernel handle leak issue in ProcObsrvesx.sys could allow privilege escalation for low-privileged users. Recommendations: For version 4.0.0.49, consider updating to a...