2699 matches found
M365 activation fails when app layering elastic\user layers are enabled
When publishing an App Layering image with Elastic enabled, M365 may fail to be licensed. You may find the license is missing at C:\ProgramData\Microsoft\Office\Licenses\5...
Python 代码问题漏洞
Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python that stems from a vulnerability found in the venv module and CLI, where...
Fedora: Security Advisory (FEDORA-2024-f7d6b76677)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-9707 Hunk Companion <= 1.8.4 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the /wp-json/hc/v1/themehunk-import REST API endpoint in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to...
Exploit for Missing Authorization in Themehunk Hunk_Companion
CVE-2024-9707 Hunk Companion = 1.8.4 - Missing Authorizati...
Exploit for CVE-2023-30486
CVE-2023-30486 Square = 2.0.0 - Missing Authorization via...
Fake Disney+ activation page redirects to pornographic scam
A common way to activate digital subscriptions such as Netflix, Prime or Disney+ on a new TV is to visit a website and enter the code seen on your screen. It's much easier than having to authenticate using a remote and typing a username and password. Scammers are creating fake activation pages th...
PUB-A-335031446
there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
systemd bug fix update
An update is available for systemd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The systemd packages contain systemd, a system and service manager for Linux,...
CVE-2024-6769 Medium to High Integrity Privilege Escalation in Microsoft Windows
A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integri...
CVE-2024-6769 Medium to High Integrity Privilege Escalation in Microsoft Windows
A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integri...
CVE-2024-6769
CVE-2024-6769 describes a Windows DLL hijacking and Activation Context Cache poisoning chain that enables a MEDIUM integrity process to escalate to HIGH integrity (Administrator) without a UAC prompt. The exploit combines drive remapping (ROOT drive) with activation-context manipulation via CSRSS...
CGA-VGH7-PWPF-J462
Bulletin has no description...
CGA-PM8F-H5VM-FP8Q
Bulletin has no description...
CGA-MXXW-VQ3V-9FMM
Bulletin has no description...
CGA-JH6Q-P48R-6G4M
Bulletin has no description...
CGA-JG5G-8XX5-J444
Bulletin has no description...
CGA-J5V4-WCP4-7FJR
Bulletin has no description...