7835 matches found
CVE-2020-13555: Incorrect Default Permissions
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In COM Server Application Privilege Escalation, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege...
PT-2021-9632
Name of the Vulnerable Software and Affected Versions Advantech WebAccess/SCADA version 9.0.1 Description A local privilege elevation issue exists in the file system permissions of the installation, allowing an attacker to replace binary or loaded modules and execute code with NT SYSTEM privilege...
COM-Code-Helper - Two IDAPython Scripts Help You To Reconstruct Microsoft COM (Component Object Model) Code
Two IDAPython Scripts help you to reconstruct Microsoft COM Component Object Model Code Especially malware reversers will find this useful, as COM Code is still regularly found in malware. ClassAndInterfaceToNames.py This IDAPython script scans an idb file for class and interfaces UUIDs and creat...
audir (0.1.0), com-impl (>=0.1.0, <=0.1.1) +6 more potentially affected by CVE-2021-45681 via derive-com-impl (0.1.1)
derive-com-impl CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on derive-com-impl and may be impacted: - audir 0.1.0 - com-impl =0.1.0, =0.3.0-alpha1, =0.3.0-alpha1, =0.3.0-alpha4 - dxgi 0.3.0-alpha4 - wic 0.3.0-alpha1 Source cves:...
PT-2021-24255
Name of the Vulnerable Software and Affected Versions: derive-com-impl crate versions prior to 0.1.2 Description: An issue in the derive-com-impl crate can cause an invalid reference and memory corruption because the AddRef method might not be called before returning a pointer. The QueryInterface...
Dll Hijacking Vulnerability in Teachers' Side of Tianxue.com
Tianxue.com is an intelligent English learning brand for student groups under Beijing Tianxue.com Education Technology Co. A dll hijacking vulnerability exists in the teacher side of Tianxue.com. An attacker can exploit this vulnerability to execute malicious code...
PT-2021-27462
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: dotnet parse tilde 2, dotnet parse tilde, and dotnet...
PT-2021-27582
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state involves several functions: yr object set string, dotnet parse us, and dotnet...
PT-2021-27504
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions dotnet parse us, dotnet parse com, and dotnet load. No informatio...
Joomla! cross-site scripting vulnerability (CNVD-2021-03991)
Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in Joomla! 3.1.0-3.9.23. The...
CVE-2021-23123
An issue was discovered in Joomla! 3.0.0 through 3.9.23. The lack of ACL checks in the orderPosition endpoint of commodules leak names of unpublished and/or inaccessible modules...
PT-2021-15380 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 3.1.0 through 3.9.23 Description: The issue is related to the lack of escaping of image-related parameters in multiple com tags views, which can lead to XSS attack vectors. Recommendations: For Joomla! versions 3.1.0 through...
Open Source Matters Joomla 跨站脚本漏洞
Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in Joomla! 3.1.0-3.9.23. The...
PT-2021-28084
Name of the Vulnerable Software and Affected Versions dotnet affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the dotnet parse tilde 2, dotnet parse tilde, and dotnet parse com functions. This is based on an OSS-Fuzz report...
PT-2020-17367 · Open Source Matters · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.22 Description: A missing token check in the emailexport feature of com privacy causes a CSRF issue. Recommendations: For Joomla! versions 2.5.0 through 3.9.22, update to a version that includes the fix for...
Joomla! 跨站请求伪造漏洞
Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site request forgery vulnerability exists in Joomla! 2.5.0 - 3.9.22. The...
PT-2020-17362 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 2.5.0 through 3.9.22 Description: An issue was discovered where the autosuggestion feature of com finder did not respect the access level of the corresponding terms. Recommendations: For Joomla! versions 2.5.0 through 3.9.22,...
PT-2020-22192
Name of the Vulnerable Software and Affected Versions dotnet affected versions not specified Description The issue is related to a heap-buffer-overflow read, which can cause a crash. Technical details about the crash include the dotnet parse tilde 2, dotnet parse tilde, and dotnet parse com...
PT-2020-22171
Name of the Vulnerable Software and Affected Versions dotnet affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the dotnet parse tilde 2, dotnet parse tilde, and dotnet parse com functions. Recommendations At...
