4407 matches found
Leakage of third-party OAuth token via redirect
Description The application allows the usage of third-parties to store the files, such as Google Drive, Github, Gitlab, etc. It's possible to bypass the protection of the redirect parameter and redirect the user and the OAuth token to an attacker controlled site. Proof of Concept 1. An attacker...
CVE-2021-33077
Insufficient control flow management in firmware for some IntelR SSD, IntelR OptaneTM SSD and IntelR SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2021-33075
Race condition in firmware for some IntelR OptaneTM SSD, IntelR OptaneTM SSD DC and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...
多款Intel产品授权问题漏洞
IntelR SSD and others are products of Intel Corporation Intel, U.S.A. IntelR SSD is a type of solid state drive.IntelR OptaneTM SSD is a new type of non-volatile memory.IntelR OptaneTM SSD DC is a type of solid state drive.IntelR OptaneTM SSD DC is a type of solid state drive.IntelR OptaneTM SSD ...
多款Intel产品安全漏洞
IntelR OptaneTM SSD, etc. are products of Intel Corporation, U.S.A. IntelR OptaneTM SSD is a new type of non-volatile memory.IntelR OptaneTM SSD DC is a type of solid state drive.IntelR SSD DC is a type of built-in solid state drive. . A security vulnerability exists in multiple Intel products th...
多款Intel产品竞争条件问题漏洞
IntelR OptaneTM SSD and IntelR SSD DC are both products of Intel Corporation, U.S.A. IntelR OptaneTM SSD is a new type of non-volatile memory, and IntelR SSD DC is a built-in solid state drive. A security vulnerability exists in multiple Intel products that stems from a race condition issue withi...
多款Intel产品安全漏洞
IntelR SSDs, etc. are products of Intel Corporation Intel, U.S.A. IntelR SSDs are a type of solid state drive.IntelR OptaneTM SSDs are a new type of non-volatile memory.IntelR SSD DCs are a type of built-in solid state drive.IntelR SSD DCs are a type of built-in solid state drive. A security...
多款Intel产品安全漏洞
IntelR OptaneTM SSD, etc. are products of Intel Corporation, U.S.A. IntelR OptaneTM SSD is a new type of non-volatile memory.IntelR OptaneTM SSD DC is a type of solid state drive.IntelR SSD DC is a type of built-in solid state drive. . A security vulnerability exists in multiple Intel products th...
CVE-2022-0026
A local privilege escalation PE vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory such as C:\ to execute a program with elevated privileges. This issue impacts all...
QEMU: block: fdc: null pointer dereference may lead to guest crash
A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulti...
PT-2022-4324 · Intel · Intel Optane Ssd +2
Name of the Vulnerable Software and Affected Versions: Intel SSD versions affected versions not specified Intel Optane SSD versions affected versions not specified Intel Optane SSD DC versions affected versions not specified Intel SSD DC versions affected versions not specified Description: The...
Git Access Control Privilege Escalation
The vulnerability of the distributed Git version control system relates to the possibility of creating a folder named “C:.git”. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...
CVE-2022-27905
In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require write permissions to the root level of the OS drive C:\ to exploit this...
CVE-2022-27905
In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require write permissions to the root level of the OS drive C:\ to exploit this...
CVE-2022-27905
In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require write permissions to the root level of the OS drive C:\ to exploit this...
April 25, 2022—KB5011831 (OS Builds 19042.1682, 19043.1682, and 19044.1682) Preview
None None...
PT-2022-10453 · Solarwinds · Serv-U
Name of the Vulnerable Software and Affected Versions: Serv-U versions 15.3.0.X through 15.3.0.X before Hotfix 1 Serv-U version 15.3 Description: A researcher reported a Directory Transversal issue in Serv-U. This may allow access to files relating to the Serv-U installation and server files. The...
April 25, 2022—KB5012637 (OS Build 20348.681) Preview
None None...
Cisco Webex Meetings Web Interface Disclosure Phishing Drive-by
The vulnerability of Cisco Webex Meetings’ software web interface exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to disclose protected information, alter the appearance of the website, and perform phishing attacks ...
Trojan.Win32.TScash.c Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/9d18d318e017b513b9c6cd193ccdc6ff.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.TScash.c Vulnerability: Insecure Permissions Description: The malware writes a PE file...