39 matches found
CVE-2020-5379
Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...
CVE-2020-5379
Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...
Design/Logic Flaw
Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...
CVE-2020-5379
Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...
CVE-2020-5379
Dell Inspiron 7352 BIOS versions prior to A12 are affected by a UEFI BIOS Boot Services overwrite vulnerability that allows a local attacker with memory access to overwrite EFI_BOOT_SERVICES and execute arbitrary code in System Management Mode (SMM). Dell lists a BIOS update to A12 as the mitigat...
CVE-2020-5379
Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...
CVE-2020-7352
CVE-2020-7352 context : The GalaxyClientService in GOG Galaxy runs as SYSTEM on Windows. It ships with an embedded, static RSA private key and listens on localhost:9978, enabling a local attacker with user privileges to execute OS commands in elevated context via crafted inputs. The issue affects...
CVE-2020-7352
creationtimestamp| type| source ---|---|--- 2020-06-15 14:42:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/goggalaxyclientserviceprivesc.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...
GOG GalaxyClientService Privilege Escalation Exploit
This Metasploit module will send arbitrary filepaths to the GOG GalaxyClientService, which will be executed with SYSTEM privileges verified on GOG Galaxy Client v1.2.62 and v2.0.12; prior versions are also likely affected. This module requires Metasploit: https://metasploit.com/download Current...
GOG GalaxyClientService Privilege Escalation
This module will send arbitrary filepaths to the GOG GalaxyClientService, which will be executed with SYSTEM privileges verified on GOG Galaxy Client v1.2.62 and v2.0.12; prior versions are also likely affected. Module Options msf use exploit/windows/local/gog/galaxyclientserviceprivesc msf...
CVE-2019-7352
Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view 'state' aka Run State state.php does no input validation to the value supplied to the 'New State' aka newState field, allowing an attacker to execute HTML or JavaScript code...
CVE-2019-7352
Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, as the view 'state' aka Run State state.php does no input validation to the value supplied to the 'New State' aka newState field, allowing an attacker to execute HTML or JavaScript code...
CVE-2019-7352
Summary: CVE-2019-7352 is a self-stored XSS in ZoneMinder up to version 1.32.3 via the Run State (state.php) “New State” field, which lacks input validation and can inject HTML/JavaScript. Affected software: ZoneMinder ≤ 1.32.3 (Run State/State page). Root cause: Insufficient input validation on ...
CVE-2017-7352
The CVE-2017-7352 entry describes a Stored Cross-Site Scripting (XSS) vulnerability in Pure Storage Purity 4.7.5. The issue is triggered by the host parameter on the System > Configuration > SNMP > Add SNMP Trap Manager screen, allowing remote authenticated users to inject arbitrary web ...
porn.porn XSS vulnerability
Vulnerable URL: http://porn.porn/tags/18-year%22%3E%3Cimg%20src=x%20onerror=prompt'OPENBUGBOUNTY'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7352 VIP website status:| Yes...
CVE-2014-7352
The CVE-2014-7352 entry affects the Android app India’s Anthem (appinventor.ai_opalfoxy83.India_Anthem) v1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...
CVE-2013-7352
CVE-2013-7352/2945 describe a CSRF-enabled SQL injection in b2evolution and its admin.php show_statuses[] parameter, affecting installations before 4.1.7. The issue allows remote (via CSRF) authenticated admins to run arbitrary SQL commands, potentially hijacking admin actions. Affected product: ...
PayPal Inc BB #61 - Persistent Mail Encoding Vulnerability
Document Title: =============== PayPal Inc BB 61 - Persistent Mail Encoding Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=846 PayPal Security UID: bzbe1he Release Date: ============= 2013-10-15 Vulnerability Laboratory ID VL-ID:...