9688 matches found
CVE-2022-23171 AtlasVPN - Privilege Escalation
AtlasVPN - Privilege Escalation Lack of proper security controls on named pipe messages can allow an attacker with low privileges to send a malicious payload and gain SYSTEM permissions on a windows computer where the AtlasVPN client is installed...
CVE-2022-23171
Consolidated details from multiple sources confirm a privilege-escalation vulnerability in the AtlasVPN Windows client (CVE-2022-23171) caused by insufficient security controls over named pipe messages. An attacker with low privileges can send a malicious payload to gain SYSTEM permissions on a m...
CVE-2022-26862
Prior Dell BIOS versions contain an Input Validation vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability by sending malicious input to an SMI in order to bypass security controls in SMM...
PT-2022-15898 · Atlasvpn · Atlasvpn
Name of the Vulnerable Software and Affected Versions: AtlasVPN affected versions not specified Description: The issue is related to a lack of proper security controls on named pipe messages, which can allow an attacker with low privileges to send a malicious payload and gain SYSTEM permissions o...
Malicious code in hitta-partner-controls (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca35831ede7c57b2cd74685e16eff1ffc36244b7b031a1e3cb0e626f8a3b6492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2017-20066
A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used...
CVE-2017-20066
A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used...
CVE-2017-20066 Adminer Login access control
A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used...
CVE-2017-20066
The CVE-2017-20066 entry concerns the Adminer Login WordPress plugin version 1.4.4, where a local improper access control vulnerability is reported. Connected sources describe that the vulnerability could permit an attacker to authenticate/connect to local/internal WordPress databases from the pu...
CVE-2017-20066 Adminer Login access control
A vulnerability has been found in Adminer Login 1.4.4 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used...
PT-2022-7939
Name of the Vulnerable Software and Affected Versions Adminer Login version 1.4.4 Description A vulnerability has been found in Adminer Login, classified as problematic, affecting unknown code and leading to improper access controls. The manipulation can be launched on the local host. The exploit...
Security Is Shifting in a Cloud-Native World: Insights From RSAC 2022
The cloud has become the default for IT infrastructure and resource delivery, allowing an unprecedented level of speed and flexibility for development and production pipelines. This helps organizations compete and innovate in a fast-paced business environment. But as the cloud becomes more...
Xiaomi Lamp security vulnerability
Xiaomi Lamp is a Xiaomi Smart Desk Lamp from the Chinese company Xiaomi Xiaomi. A security vulnerability exists in Xiaomi Lamp version 1 v2.0.40066, which can be exploited by an attacker to bypass intended access restrictions and gain control of the switch and other features via a crafted POST...
CVE-2022-1958
A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It ...
CVE-2022-1958
A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It ...
Authorization Bypass
github.com/edgexfoundry/edgex-go and github.com/edgexfoundry/device-sdk-go are vulnerable to authorization bypass. The vulnerability exists in BootstrapHandler function in messaging.go because it doesn't remove MessageBus Options data from configuration after creating a message client which allow...
CVE-2022-31066
EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prior to version 2.1.1, the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to...
Authentication flaw
EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prior to version 2.1.1, the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to...
CVE-2022-31066 Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users
EdgeX Foundry is an open source project for building a common open framework for Internet of Things edge computing. Prior to version 2.1.1, the /api/v2/config endpoint exposes message bus credentials to local unauthenticated users. In security-enabled mode, message bus credentials are supposed to...
