Windows CSC Service Elevation of Privilege Vulnerability

...

CVE-2024-26229: Heap-based Buffer Overflow

Windows CSC Service Elevation of Privilege Vulnerability...

PT-2024-2982

Name of the Vulnerable Software and Affected Versions Windows CSC Service affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows CSC Service, which can be exploited due to improper address validation in IOCTL with METHOD NEITHER...

csc-magdeburg.de Cross Site Scripting vulnerability OBB-3619820

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CSC-CMS 1.0.0 Insecure Settings

==================================================================================================================================== | Title : CSC-CMS v1.0.0 Insecure Settings Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 68.032-bit | |...

SAMSUNG Mobile devices CSC application information disclosure vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung SAMSUNG, including cell phones, tablets, and more. An information disclosure vulnerability exists in the CSC application in SAMSUNG Mobile devices, which originates from the CSC exposing sensitive...

CVE-2022-33694

Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting...

CVE-2022-33694

Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting...

CVE-2022-33694

Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting...

Information disclosure

Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting...

CVE-2022-33694

CVE-2022-33694 is an exposure of sensitive information in the Samsung CSC application on Samsung Mobile devices. The root issue is disclosure of wifi information through unprotected intent broadcasting within the CSC app prior to the SMR July 2022 release 1. The vulnerability permits a local atta...

CVE-2022-33694

Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting...

CVE-2022-33694: Exposure of Sensitive Information Due to Incompatible Policies

Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting...

PT-2022-21810

Name of the Vulnerable Software and Affected Versions CSC application versions prior to SMR Jul-2022 Release 1 Description The issue allows a local attacker to access wifi information via unprotected intent broadcasting, resulting in the exposure of sensitive information. Recommendations For...

oiraa.dw.sc.edu Cross Site Scripting vulnerability OBB-2622922

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-38451

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data...

CVE-2021-38451

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data...

CVE-2021-38451

CVE-2021-38451 affects AUVESY Versiondog. The issue is an out-of-bounds read in the proprietary CSC protocol: there is no sanitation on the offset, allowing a client to specify any offset and read data outside the intended bounds. This aligns with public records describing an out-of-bounds read v...

CVE-2021-38451: Out-of-bounds Read

The affected product’s proprietary protocol CSC allows for calling numerous function codes. In order to call those function codes, the user must supply parameters. There is no sanitation on the value of the offset, which allows the client to specify any offset and read out-of-bounds data...

Microsoft Windows/Windows Server Information Disclosure Vulnerability (CNVD-2021-63293)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. An information disclosure vulnerability exists in the CSC service of...