15202 matches found
GSD-2023-1000429 drm/i915/ttm: consider CCS for backup objects
drm/i915/ttm: consider CCS for backup objects This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...
WordPress MainWP BlogVault Backup Extension Plugin <= 1.3 is vulnerable to Broken Access Control
Software MainWP BlogVault Backup Extension Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23741 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID a23fba51ad99 Credits Dave Jong...
PT-2023-33507 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.0.8 through v6.0.17 Description: The issue is related to corrupt backup group descriptors after an online resize in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven...
A Secure User Authentication Method – Planning is More Important than Ever
When considering authentication providers, many organizations consider the ease of configuration, ubiquity of usage, and technical stability. Organizations cannot always be judged on those metrics alone. There is an increasing need to evaluate company ownership, policies and the stability, or...
Security Bulletin: A vulnerability in Open JDK affecting Rational Functional Tester
Summary A vulnerability in Open JDK Version 8, OpenJ9 used by Rational Functional Tester RFT. RFT has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-3676 DESCRIPTION: Eclipse Openj9 could allow a remote attacker to bypass security restrictions, caused by improper runtime type...
PT-2023-15526 · Sewio · Sewio'S Real-Time Location System (Rtls) Studio
Name of the Vulnerable Software and Affected Versions: Sewio’s Real-Time Location System RTLS Studio versions 2.0.0 through 2.6.2 Description: The issue is related to improper validation of the input module name to the backup services of the software. This could allow a remote attacker to access...
Microsoft Patch Tuesday January 2023: ALPC EoP, Win Backup EoP, LocalPotato, Exchange, Remote RCEs
Hello everyone! This episode will be about Microsoft Patch Tuesday for January 2023, including vulnerabilities that were added between December and January Patch Tuesdays. Alternative video link for Russia: As usual, I use my open source Vulristics project to analyse and prioritize vulnerabilitie...
WordPress Slider Revolution 4.9.2 Directory Traversal
==================================================================================================================================== | Title : WordPress - Slider Revolution 4.9.2 Directory Traversal Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...
Global Education And Technoworld 4.1 Backup Disclosure
==================================================================================================================================== | Title : GLOBAL EDUCATION & TECHNOWORLD Version 4.1 unauthorized backup download Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.10Pro /...
Microsoft Windows Backup Service Elevation of Privilege Vulnerability (CNVD-2023-02699)
Microsoft Windows Backup Service is an elevation of privilege vulnerability that can be exploited by attackers to elevate privileges...
The vulnerability of the Windows Backup Service allows attackers to elevate their privileges to the SYSTEM level.
The vulnerability of the Windows Backup Service in operating systems relates to errors in privilege management. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...
CVE-2023-21752
Windows Backup Service Elevation of Privilege Vulnerability...
CVE-2023-21752
Windows Backup Service Elevation of Privilege Vulnerability...
CVE-2023-21752
Windows Backup Service Elevation of Privilege Vulnerability...
Privilege escalation
Windows Backup Service Elevation of Privilege Vulnerability...
Windows Backup Service Elevation of Privilege Vulnerability
...
Microsoft Windows 安全漏洞
Microsoft Windows Backup Service is an elevation of privilege vulnerability that can be exploited by attackers to elevate privileges...
How to Connect to an Object Storage Repository via Azure Blob Private Endpoints
Purpose This article documents how to configure Veeam Backup & Replication to use Azure Blob Storage Account private endpoints via Azure VPN or Azure ExpressRoute for Scale-Out Backup Repository offload to Capacity Tier or Archive Tier or to connect to an Object Storage Repository in Veeam Backup...
