EUVD-2021-29096

Malicious code in bioql PyPI...

EUVD-2021-30840

Malicious code in bioql PyPI...

CVE-2021-43978

Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modify data using the same credentials...

CVE-2021-42110

An issue was discovered in Allegro Windows formerly Popsy Windows before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking...

CVE-2021-43978

Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modify data using the same credentials...

CVE-2021-43978

Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modify data using the same credentials...

Design/Logic Flaw

Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modify data using the same credentials...

CVE-2021-43978

CVE-2021-43978 affects Allegro Windows 3.3.4152.0. The vulnerability arises because the product embeds software administrator database credentials into its binary files, enabling users to access and modify data with the same credentials. The available sources confirm the issue but do not provide ...

CVE-2021-42110

An issue was discovered in Allegro Windows formerly Popsy Windows before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking...

CVE-2021-42110

An issue was discovered in Allegro Windows formerly Popsy Windows before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking...

Design/Logic Flaw

An issue was discovered in Allegro Windows formerly Popsy Windows before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking...

CVE-2021-42110

Allegro Windows (formerly Popsy Windows) before version 3.3.4156.1 is affected by a DLL hijacking issue in the FTP module that allows a standard user to escalate to SYSTEM privilege. The root cause is DLL hijacking when the FTP module is installed. Impact is local privilege escalation to SYSTEM; ...

CVE-2021-42110

An issue was discovered in Allegro Windows formerly Popsy Windows before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking...

CVE-2021-43978: Insufficiently Protected Credentials

Allegro WIndows 3.3.4152.0, embeds software administrator database credentials into its binary files, which allows users to access and modify data using the same credentials...

CVE-2021-42110: Undefined Security Weakness

An issue was discovered in Allegro Windows formerly Popsy Windows before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking...

Allegro Windows 输入验证错误漏洞

Allegro Windows is an accounting and management solution from Allegro Belgium. An input validation error vulnerability exists in Allegro Windows, which arises from the product's failure to validate a called DLL file. An attacker could cause a DLL hijacking to elevate privileges to SYSTEM after...

Allegro Windows 安全漏洞

Allegro Windows is an accounting and management solution from the Belgian company Allegro. A security vulnerability exists in Allegro Windows that stems from Allegro WIndows embedding software administrator database credentials into a binary file, allowing users to access and modify data using th...