Windows File Explorer Information Disclosure Vulnerability

...

Microsoft Windows File Explorer 路径遍历漏洞

Microsoft Windows File Explorer is a file manager application from Microsoft Corporation USA. A path traversal vulnerability exists in Microsoft Windows File Explorer. An attacker could exploit this vulnerability to obtain sensitive information. The following products and versions are...

PT-2024-9448 · Microsoft · Windows File Explorer +1

Name of the Vulnerable Software and Affected Versions: Windows File Explorer affected versions not specified Description: The issue is related to incorrect restriction of a directory path name with limited access in the Windows File Explorer application. This can allow a remote attacker to gain...

September 24, 2024—KB5043131 (OS Build 19045.4957) Preview

None None...

ES File Explorer Open Port

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ES File Explorer Open Port', 'Description' = %q This module connects to ES File Explorer's HTTP server to run certain commands. The HTTP server i...

The vulnerability of the Windows File Explorer driver on Windows operating systems, allowing attackers to exploit their privileges

The vulnerability of the Windows File Explorer driver in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-38100

Windows File Explorer Elevation of Privilege Vulnerability...

CVE-2024-38100

Windows File Explorer Elevation of Privilege Vulnerability...

CVE-2024-38100 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2024-38100 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2024-38100

CVE-2024-38100 is a Windows File Explorer elevation-of-privilege vulnerability. The provided documents identify it as a Windows File Explorer issue with a CVSS v3.1 base score of 7.8 (Local access, Privilege escalation, no user interaction). Connected sources corroborate Windows-vulnerability con...

Windows File Explorer Elevation of Privilege Vulnerability

...

Microsoft Windows File Explorer security vulnerability

Microsoft Windows File Explorer is a file manager application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows File Explorer. An attacker exploiting this vulnerability could elevate privileges. The following products and editions are affected:Windows Server...

PT-2024-4763

The Windows File Explorer is affected by a privilege escalation issue, which allows attackers to gain access to a user's NetNTLM hash from any session on the computer, even with low-privileged user rights. This issue is related to unnecessary permissions being set in Access Security when...

June 25, 2024—KB5039302 (OS Builds 22621.3810 and 22631.3810) Preview

None None...

CVE-2024-1569

parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...

CVE-2024-1569 Uncontrolled Resource Consumption in parisneo/lollms-webui

parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...

CVE-2024-1569 Uncontrolled Resource Consumption in parisneo/lollms-webui

parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...

CVE-2023-51751

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

CVE-2023-51748

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...