222 matches found
CVE-2024-26229
CVE-2024-26229 Windows CSC service privilege escalation vulnerability. When a program writes more data to a buffer than its capacity, a heap-based buffer overflow occurs, causing excess data to overflow into adjacent memory areas. This overflow can corrupt memory and may allow an attacker to...
CVE-2024-26229-BOF
CVE-2024-26229 BOF Implementación en Beacon Object File de CVE-2024-26229 — escalada de privilegios local del controlador CSC de Windows mediante robo de token DKOM. Basado en RalfHacker/CVE-2024-26229-exploit, convertido a BOF con resolución dinámica de funciones DFR para usar con frameworks C2...
CVE-2025-46018-CSC-Pay-Mobile-App-Payment-Authentication-Bypass
CVE-2025-46018 – CSC Pay Mobile App Payment Authentication Bypass Summary A payment authentication bypass vulnerability was discovered in the CSC Pay Mobile App, affecting version 2.19.4. The flaw allowed an attacker to initiate a payment, disable Bluetooth at a specific point in the process, and...
cve-2024-26229
cve-2024-26229 A nim version of the now outdated Windows LPE vulnerability abusing CSC. This is for educational purposes only, and refer to the patch list to determine whether or not your system/your target is vulnerable. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26229 Usage...
CVE-2026-58637: Use After Free
Use after free in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
Exploit for Heap-based Buffer Overflow in Microsoft
CVE-2024-26229 BOF Beacon Object File implementation of CVE-2...
Microsoft Windows CSC Service 访问控制错误漏洞
Microsoft Windows CSC Service is an application from Microsoft USA. that allows the use of network files while the local computer is offline. An access control error vulnerability exists in Microsoft Windows CSC Service. An attacker exploiting this vulnerability could gain access to sensitive...
CVE-2026-20839: Improper Access Control
Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to disclose information locally...
CVE-2025-62466
Null pointer dereference in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
KB5071543: Windows 10 Version 1607 / Windows Server 2016 Security Update (December 2025)
The remote Windows host is missing security update 5071543. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Heap-based buffer...
KB5071505: Windows Server 2012 Security Update (December 2025)
The remote Windows host is missing security update 5071505. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Heap-based buffer...
CVE-2025-62466: NULL Pointer Dereference
Null pointer dereference in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows CSC Service 代码问题漏洞
Microsoft Windows CSC Service is an application from Microsoft Corporation USA. It allows the use of network files while the local computer is offline. A code issue vulnerability exists in Microsoft Windows CSC Service. An attacker exploiting this vulnerability could elevate privileges. The...
KB5071503: Windows Server 2012 R2 Security Update (December 2025)
The remote Windows host is missing security update 5071503. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network. CVE-2025-62549 - Heap-based buffer...
CVE-2025-60705: Improper Access Control
Improper access control in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
Barco ClickShare Devices Cross-site Scripting (CVE-2016-3150)
Cross-site scripting XSS vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML v...
Barco ClickShare Devices Exposure of Sensitive Information to an Unauthorized Actor (CVE-2016-3152)
Barco ClickShare CSC-1 devices with firmware before 01.09.03 allow remote attackers to obtain the root password by downloading and extracting the firmware image. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...
Barco ClickShare Devices OS Command Injection (CVE-2017-9377)
A command injection was identified on Barco ClickShare Base Unit devices with CSM-1 firmware before 1.7.0.3 and CSC-1 firmware before 1.10.0.10. An attacker with access to the product's web API can exploit this vulnerability to completely compromise the vulnerable device. This plugin only works...
Barco ClickShare Devices Arbitrary Code Execution (CVE-2016-3149)
Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
