817 matches found
CVE-2023-29366
Windows Geolocation Service Remote Code Execution Vulnerability...
CVE-2023-29366
Windows Geolocation Service Remote Code Execution Vulnerability...
CVE-2023-29366
Windows Geolocation Service Remote Code Execution Vulnerability...
Remote code execution
Windows Geolocation Service Remote Code Execution Vulnerability...
CVE-2023-29366 Windows Geolocation Service Remote Code Execution Vulnerability
...
CVE-2023-29366
Technical details about CVE-2023-29366 are not publicly provided in the supplied documents. No concrete information on affected product versions, root cause, impact, or remediation is included here. Monitor for updates from official sources.
CVE-2023-29366 Windows Geolocation Service Remote Code Execution Vulnerability
...
Windows Geolocation Service Remote Code Execution Vulnerability
...
PT-2023-3190 · Microsoft · Windows Geolocation Service +1
Name of the Vulnerable Software and Affected Versions: Windows Geolocation Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows Geolocation Service, which can be exploited by an attacker to execute arbitrary code using a special...
Microsoft Windows Geolocation Service 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Geolocation Service. An attacker could exploit this vulnerability to remotely execute code. The following product...
XSS-Exploitation-Tool - An XSS Exploitation Tool
XSS Exploitation Tool is a penetration testing tool that focuses on the exploit of Cross-Site Scripting vulnerabilities. This tool is only for educational purpose, do not use it against real environment Features Technical Data about victim browser Geolocation of the victim Snapshot of the...
Adversaries increasingly using vendor and contractor accounts to infiltrate networks
Cisco Talos Incident Response Talos IR has repeatedly observed attackers targeting and using compromised vendor and contractor accounts VCAs during recent emergency response engagements. While high-profile software supply chain compromise events garner significant media attention e.g., the recent...
FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring
The U.S. Federal Trade Commission FTC has fined Amazon a cumulative $30.8 million over a series of privacy lapses regarding its Alexa assistant and Ring security cameras. This comprises a $25 million penalty for breaching children's privacy laws by retaining their Alexa voice recordings for...
New Zero-Click Hack Targets iOS Users with Stealthy Root-Privilege Malware
A previously unknown advanced persistent threat APT is targeting iOS devices as part of a sophisticated and long-running mobile campaign dubbed Operation Triangulation that began in 2019. "The targets are infected using zero-click exploits via the iMessage platform, and the malware runs with root...
answer information disclosure vulnerability (CNVD-2023-29790)
answer is an open source knowledge-based community software. An information disclosure vulnerability exists in versions of answer prior to 1.0.8. The vulnerability stems from the fact that when a user uploads his logo, the EXIF geolocation data of the uploaded image is not stripped. An attacker...
CVE-2023-29850
SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...
Information disclosure
SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...
Slims9 Bulian 安全漏洞
Slims9 Bulian is a free and open source software from the Indonesian Slims community. It is used for library resource management e.g., books, journals, digital files, and other library materials and administration. A security vulnerability exists in Slims9 Bulian version v9.5.2. An attacker...
CVE-2023-29850
SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...