Microsoft Windows File Explorer 路径遍历漏洞

Microsoft Windows File Explorer is a file manager application from Microsoft Corporation USA. A path traversal vulnerability exists in Microsoft Windows File Explorer. An attacker could exploit this vulnerability to obtain sensitive information. The following products and versions are...

CVE-2024-49082: Improper Limitation of a Pathname to a Restricted Directory

Windows File Explorer Information Disclosure Vulnerability...

September 24, 2024—KB5043131 (OS Build 19045.4957) Preview

None None...

ES File Explorer Open Port

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ES File Explorer Open Port', 'Description' = %q This module connects to ES File Explorer's HTTP server to run certain commands. The HTTP server i...

The vulnerability of the Windows File Explorer driver on Windows operating systems, allowing attackers to exploit their privileges

The vulnerability of the Windows File Explorer driver in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-38100

Windows File Explorer Elevation of Privilege Vulnerability...

CVE-2024-38100

Windows File Explorer Elevation of Privilege Vulnerability...

CVE-2024-38100 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2024-38100 Windows File Explorer Elevation of Privilege Vulnerability

...

CVE-2024-38100

CVE-2024-38100 is a privilege escalation vulnerability in the Windows File Explorer driver and the Windows COM Session component. The root cause is attributed to deficiencies in access control , which could allow a low-privileged attacker to enhance their privileges on the system. Several public ...

Windows File Explorer Elevation of Privilege Vulnerability

...

Microsoft Windows File Explorer security vulnerability

Microsoft Windows File Explorer is a file manager application from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows File Explorer. An attacker exploiting this vulnerability could elevate privileges. The following products and editions are affected:Windows Server...

PT-2024-4763

The Windows File Explorer is affected by a privilege escalation issue, which allows attackers to gain access to a user's NetNTLM hash from any session on the computer, even with low-privileged user rights. This issue is related to unnecessary permissions being set in Access Security when...

CVE-2024-38100: Improper Access Control

Windows File Explorer Elevation of Privilege Vulnerability...

June 25, 2024—KB5039302 (OS Builds 22621.3810 and 22631.3810) Preview

None None...

CVE-2024-1569

parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...

CVE-2024-1569 Uncontrolled Resource Consumption in parisneo/lollms-webui

parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...

CVE-2024-1569 Uncontrolled Resource Consumption in parisneo/lollms-webui

parisneo/lollms-webui is vulnerable to a denial of service DoS attack due to uncontrolled resource consumption. Attackers can exploit the /opencodeinvscode and similar endpoints without authentication by sending repeated HTTP POST requests, leading to the opening of Visual Studio Code or the...

CVE-2023-51748

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...

CVE-2023-51751

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode...