CVE-2023-2870

CVE-2023-2870 affects EnTech Monitor Asset Manager 2.9. The root cause is a manipulation of the IoControlCode Handler’s function 0x80002014, leading to Denial of Service (local host). Exploitation is described as possible, with public disclosure of the exploit. Multiple connected sources corrobor...

CVE-2023-2870 EnTech Monitor Asset Manager IoControlCode 0x80002014 denial of service

A vulnerability was found in EnTech Monitor Asset Manager 2.9. It has been declared as problematic. Affected by this vulnerability is the function 0x80002014 of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host...

PT-2023-21915 · Entech · Entech Monitor Asset Manager

Name of the Vulnerable Software and Affected Versions: EnTech Monitor Asset Manager version 2.9 Description: A vulnerability was found in the function 0x80002014 of the component IoControlCode Handler, which leads to denial of service. The manipulation can be launched on the local host. The explo...

EnTech Monitor Asset Manager 安全漏洞

EnTech Monitor Asset Manager is a plug-and-play monitor information utility from EnTech. A security vulnerability exists in EnTech Monitor Asset Manager version 2.9, which stems from a problem with the component IoControlCode Handler, and can be exploited by an attacker to conduct a...

InnovaStudio WYSIWYG Editor 5.4 - Unrestricted File Upload / Directory Traversal

Exploit Title: InnovaStudio WYSIWYG Editor 5.4 - Unrestricted File Upload / Directory Traversal Date: 11/04/2023 Exploit Author: Zer0FauLT [email protected] Vendor Homepage: innovastudio.com Product: Asset Manager Version: = Asset Manager ASP Version 5.4 Tested on: Windows 10 and Windows...

InnovaStudio WYSIWYG Editor Asset Manager 5.4 Shell Upload Vulnerability

InnovaStudio WYSIWYG Editor Asset Manager versions 5.4 and below suffer from a remote shell upload vulnerability. Exploit Title: InnovaStudio WYSIWYG Editor 5.4 ASSET MANAGER Unrestricted File Upload / Directory Traversal / Multiple WebApps Exploit Date: 11/04/2023 Exploit Author: Zer0FauLT...

Intel SUR 安全漏洞

Intel SUR is a Software Asset Manager software from Intel Corporation USA. A security vulnerability exists in IntelR SUR software prior to version 2.4.8902 that stems from incorrect access control. An attacker could exploit the vulnerability to escalate privileges...

Intel SUR 授权问题漏洞

Intel SUR is a Software Asset Manager software from Intel Corporation USA. A security vulnerability exists in IntelR SUR software prior to version 2.4.8902 that stems from incorrect authentication. An attacker could exploit the vulnerability to escalate privileges...

Intel SUR 输入验证错误漏洞

Intel SUR is a Software Asset Manager software from Intel Corporation USA. A security vulnerability exists in IntelR SUR software prior to version 2.4.8902, which stems from incorrect validation of user input. An attacker could exploit the vulnerability to escalate privileges...

Intel SUR 代码问题漏洞

Intel SUR is a Software Asset Manager software from Intel Corporation USA. A security vulnerability exists in IntelR SUR version 2.4.8902, which stems from an improper condition check in the software that could allow a privileged user to covertly enable denial of service via network access...

Intel SUR 输入验证错误漏洞

Intel SUR is a Software Asset Manager software from Intel Corporation USA. A security vulnerability exists in IntelR SUR software prior to version 2.4.8902, which stems from incorrect validation of user input. An attacker could exploit the vulnerability to escalate privileges...

The vulnerability of the IBM Rational Asset Manager (RAM) system, related to deficiencies in access control, allows a hacker to bypass security restrictions.

The vulnerability of the IBM Rational Asset Manager RAM system relates to deficiencies in access control when processing UID parameters. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

Information Disclosure

melisplatform/melis-asset-manager is vulnerable to information disclosure. The vulnerability is due to the displayFile function not properly checking whether the requested file is outside the restricted directory, allowing an attacker to read arbitrary files...

melisplatform/melis-asset-manager vulnerable to Path Traversal

Impact Attackers can read arbitrary files on affected versions of melisplatform/melis-asset-manager, leading to the disclosure of sensitive information. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-asset-manager = 5.0.1. Patches...

GHSA-7FJ2-RRQ6-RPHQ melisplatform/melis-asset-manager vulnerable to Path Traversal

Impact Attackers can read arbitrary files on affected versions of melisplatform/melis-asset-manager, leading to the disclosure of sensitive information. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-asset-manager = 5.0.1. Patches...

Melis Platform 路径遍历漏洞

Melis Platform is an open source cross-framework digital platform from Melis Platform Open Source. A path traversal vulnerability exists in Melis Platform MelisAssetManager. An attacker exploiting this vulnerability could read arbitrary files, which could lead to the disclosure of sensitive...

CVE-2011-4820

IBM Rational Asset Manager 7.5 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using the UID parameter to modify another user's preferences...

Design/Logic Flaw

IBM Rational Asset Manager 7.5 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using the UID parameter to modify another user's preferences...

IBM Rational Asset Manager 安全漏洞

IBM Rational Asset Manager is a collaborative software development tool from IBM, USA. Organizations can use it to identify, manage and govern the design, development and use of software assets and services. A privilege control issue vulnerability exists in IBM Rational Asset Manager version 7.5...

Asset Manager can update existing _assetAggregator

Lines of code Vulnerability details Impact Asset Manager can update the aggregator of an existing asset thus impacting all function making use of this asset. Ideally if an aggregator is already set for an asset the function should fail Proof of Concept 1. Asset Manager call function addAsset to...