CVE-2022-24508

Win32 File Enumeration Remote Code Execution Vulnerability...

CVE-2022-24508

Win32 File Enumeration Remote Code Execution Vulnerability...

CVE-2022-24508

Win32 File Enumeration Remote Code Execution Vulnerability...

Remote code execution

Win32 File Enumeration Remote Code Execution Vulnerability...

CVE-2022-24508 Win32 File Enumeration Remote Code Execution Vulnerability

...

CVE-2022-24508

CVE-2022-24508 is a Windows SMBv3 client/server remote code execution vulnerability. The issue resides in the SMBv3 compression feature introduced in newer Windows builds and can enable code execution on a vulnerable system when exploited over a network. Exploitation requires authentication and c...

Win32 File Enumeration Remote Code Execution Vulnerability

...

CVE-2021-43954: File and network resource enumeration via SSRF in DefaultRepositoryAdminService

Affected versions of Atlassian Fisheye and Crucible allow remote attackers, who have 'can add repository permission', to enumerate the existence of internal network and filesystem resources via a Server-Side Request Forgery SSRF vulnerability in the DefaultRepositoryAdminService class. When runni...

CVE-2021-41324

CVE-2021-41324 affects Pydio Cells 2.2.9 and involves a directory traversal vulnerability in Copy, Move, and Delete features. A remote authenticated user can enumerate personal files or other users’ files via the nodes parameter (Copy/Move) or the Path parameter (Delete). Root cause is handling o...

Improper Input Validation in Firefly III

Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...

GHSA-JJCX-999M-35HC Improper Input Validation in Firefly III

Firefly III 4.7.17.3 is vulnerable to local file enumeration. An attacker can enumerate local files due to the lack of protocol scheme sanitization, such as for file:/// URLs. This is related to fintsurl to import/job/configuration, and import/create/fints...

CVE-2021-23873

Privilege Escalation vulnerability in McAfee Total Protection MTP prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a...

Windows File Enumeration Intel Gathering Tool 2.2

from subprocess import Popen, PIPE import sys,argparse,re MIT License Copyright c 2020 John Page aka hyp3rlinx Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without...

CVE-2020-3798

Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration host or local network vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-3798

Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration host or local network vulnerability. Successful exploitation could lead to information disclosure...

Information disclosure

Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration host or local network vulnerability. Successful exploitation could lead to information disclosure...

CVE-2020-3798

CVE-2020-3798 affects Adobe Digital Editions, specifically version 4.5.11.187212 and earlier on Windows, which is vulnerable to a file enumeration (host or local network) flaw that could lead to information disclosure. The root cause is information-disclosure via file enumeration within the appli...

CVE-2020-3798

Adobe Digital Editions versions 4.5.11.187212 and below have a file enumeration host or local network vulnerability. Successful exploitation could lead to information disclosure...

Sophisticated Info-Stealer Targets Air-Gapped Devices via USB

The Cycldek APT group has added a previously unknown malware dubbed USBCulprit to its arsenal, aimed at reaching air-gapped devices. Cycldek a.k.a. Goblin Panda, APT 27 and Conimes has been targeting governments in Southeast Asia since 2013, according to analysis from Kaspersky, and has been...

Gitlab -- Multiple Vulnerabilities

Gitlab reports: User Email Verification Bypass OAuth Flow Missing Email Verification Checks Notification Email Verification Bypass Undisclosed Vulnerability on a Third-Party Rendering Engine Group Sign-Up Restriction Bypass Mirror Project Owner Impersonation Missing Permission Check on Fork...