Sql injection

Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network access to the...

CVE-2021-40842

Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network access to the...

CVE-2021-40843

Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console. An attacker with write access to the local database could cause arbitrary code to execute with SYSTEM privileges on the underlying server when a Web Console user triggers retrieval of...

CVE-2021-40842

Summary: Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console due to improper input validation on the database name parameter required by unauthenticated APIs. A malicious URL reachable over the network could cause the backend database to execute a...

CVE-2021-40842

Proofpoint Insider Threat Management Server contains a SQL injection vulnerability in the Web Console. The vulnerability exists due to improper input validation on the database name parameter required in certain unauthenticated APIs. A malicious URL visited by anyone with network access to the...

CVE-2021-40843

Proofpoint Insider Threat Management Server contains an unsafe deserialization vulnerability in the Web Console. An attacker with write access to the local database could cause arbitrary code to execute with SYSTEM privileges on the underlying server when a Web Console user triggers retrieval of...

CVE-2021-40843

Proofpoint Insider Threat Management Server: Web Console unsafe deserialization vulnerability. An attacker with write access to the local database can cause arbitrary code execution with SYSTEM privileges on the server when a Web Console user retrieves data. When combined with a SQL injection fla...

CVE-2021-41346

Console Window Host Security Feature Bypass Vulnerability...

CVE-2021-41346

Console Window Host Security Feature Bypass Vulnerability...

CVE-2021-41346

Console Window Host Security Feature Bypass Vulnerability...

Security feature bypass

Console Window Host Security Feature Bypass Vulnerability...

CVE-2021-41346 Console Window Host Security Feature Bypass Vulnerability

...

CVE-2021-41346 Console Window Host Security Feature Bypass Vulnerability

...

CVE-2021-41346

CVE-2021-41346 refers to a security feature bypass vulnerability in the Windows Console Window Host. Exploitation is local (AV:L, UI:N, integrity/confidentiality/availability impact: partial), effectively bypassing security controls and potentially enabling privilege escalation or data exposure a...

Proofpoint Insider Threat Management Server 代码问题漏洞

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. that is used to prevent malicious operations by enterprise insiders. A security vulnerability exists in Proofpoint Insider Threat Management Server that stems from Proofpoint Insider Threat Management...

Exploit for Incorrect Default Permissions in Checkmk

CVE-2021-40904 - RCE via CheckMk's Dokuwiki embedded applicati...

Exploit for Unrestricted Upload of File with Dangerous Type in Checkmk

CVE-2021-40905 - RCE via a crafted .mkp file Application:...

Update for IDOR vulnerability in System Center Operations Manager (KB5006871)

Update for IDOR vulnerability in System Center Operations Manager KB5006871 Applies to: System Center 2019 Operations Manager, System Center 2016 Operations Manager, System Center 2012 R2 Operations Manager Introduction This article describes an issue that is fixed for System Center Operations...

Console Window Host Security Feature Bypass Vulnerability

...

Microsoft Windows 安全特征问题特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security feature issue vulnerability exists in Microsoft Console Window Host. The following products and editions are affected:Windows 10 Version 21H1 for x64-based...