15 matches found
Devolutions Server <= 2025.2.12.0 Improper authorization (DEVO-2025-0015) (CVE-2025-11957)
The version of Devolutions Server installed on the remote host is prior or equal to 2025.2.12.0 and is, therefore, affected by an improper authorization vulnerability: - Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated...
CVE-2025-11957
creationtimestamp| type| source ---|---|--- 2025-10-22 18:11:42+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115419165525961928 2025-10-22 20:21:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3sobglst523...
CVE-2024-11957
Improper verification of the digital signature in ksojscore.dll in Kingsoft WPS Office in versions equal or less than 12.1.0.18276 on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.2.0.16909 to mitigate CVE-2024-7262 was not restrictive enough...
CVE-2024-11957
creationtimestamp| type| source ---|---|--- 2025-03-04 16:31:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6391 2025-03-04 17:14:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljkxohaomn2u 2025-03-04 18:21:22+00:00| seen| https://t.me/cvedetector/19521 2025-08-18...
CVE-2024-11957
Improper verification of the digital signature in ksojscore.dll in Kingsoft WPS Office in versions equal or less than 12.1.0.18276 on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.2.0.16909 to mitigate CVE-2024-7262 was not restrictive enough...
CVE-2024-11957 Arbitrary Code Execution in WPS Office
Improper verification of the digital signature in ksojscore.dll in Kingsoft WPS Office in versions equal or less than 12.1.0.18276 on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.2.0.16909 to mitigate CVE-2024-7262 was not restrictive enough...
CVE-2024-11957
Kingsoft WPS Office on Windows is affected by CVE-2024-11957 due to improper verification of the digital signature in ksojscore.dll, with affected versions 12.1.0.18276 and earlier. This allows loading of arbitrary Windows libraries. The patch released in 12.2.0.16909 to address CVE-2024-7262 was...
CVE-2024-11957 Arbitrary Code Execution in WPS Office
Improper verification of the digital signature in ksojscore.dll in Kingsoft WPS Office in versions equal or less than 12.1.0.18276 on Windows allows an attacker to load an arbitrary Windows library. The patch released in version 12.2.0.16909 to mitigate CVE-2024-7262 was not restrictive enough...
CVE-2020-11957
The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number Pairing Random with significantly less entropy than the specified 128 bits during BLE pairing. This is the case for both authenticated and unauthenticated pairing with...
CVE-2020-11957
The Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before 3.64 generates a random number Pairing Random with significantly less entropy than the specified 128 bits during BLE pairing. This is the case for both authenticated and unauthenticated pairing with...
CVE-2020-11957
CVE-2020-11957 affects Cypress PSoC Creator BLE 4.2 component, where versions before 3.64 generate a 128-bit Pairing Random with insufficient entropy. This weak random value enables a nearby attacker to perform a MITM during BLE pairing for both LE Secure Connections and LE Legacy Pairing (authen...
CVE-2019-11957
CVE-2019-11957 affects HPE Intelligent Management Center (IMC) PLAT earlier than 7.3 E0506P09. The vulnerability is described as remote code execution. Several connected sources reiterate IMC versions prior to 7.3 E0506P09, with Red Hat and CNVD entries additionally noting a stack buffer overflow...
Shadow Stream Recorder 3.0.1.7 Buffer Overflow
Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...
Shadow Stream Recorder 3.0.1.7 Buffer Overflow
This module exploits a buffer overflow in Shadow Stream Recorder 3.0.1.7. Using the application to open a specially crafted asx file, a buffer overflow may occur to allow arbitrary code execution under the context of the user. This module requires Metasploit: https://metasploit.com/download Curre...