CMS Made Simple 2.2.19 Server-Side Template Injection Vulnerability

Exploit Title: CMS Made Simple Version: 2.2.19 - SSTI Exploit Author: tmrswrr Vendor Homepage: https://www.cmsmadesimple.org/ Version: 2.2.19 Tested on: https://www.softaculous.com/demos/CMSMadeSimple 1 log in as admin and go to Layout Design Manager Breadcrumbs 2 Click edit and write SSTI payloa...

Dell SupportAssist for Home PCs Elevation of Privilege Vulnerability

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. An elevation of privilege vulnerability exists in versions prior to Dell SupportAssist for Home PCs 3.13.2.19...

Dell SupportAssist for Home PCs Access Control Error Vulnerability

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. An access control error vulnerability exists in Dell SupportAssist for Home PCs that could lead to privilege...

CVE-2023-42836

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An attacker may be able to access connected network volumes mounted in the home directory...

CVE-2023-42836

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An attacker may be able to access connected network volumes mounted in the home directory...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS version 17.1 and iPadOS version 17.1, which originates from the fact that an...

CVE-2023-42836: Undefined Security Weakness

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An attacker may be able to access connected network volumes mounted in the home directory...

sweenyfuneralhome.ca Cross Site Scripting vulnerability OBB-3854788

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

My Cloud OS SSRF

The vulnerabilities of the My Cloud OS for network storage devices, as well as the My Cloud Home and My Cloud Home Duo cloud storage services, and the SanDisk iBeacon device, are related to insufficiently checked incoming requests. Exploiting these vulnerabilities can allow attackers to execute...

My Cloud OS Uncontrolled Resource Consumption

The vulnerabilities of the My Cloud OS, My Cloud Home, and My Cloud Home Duo network storage systems, as well as the SanDisk iBI device, are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow an attacker to cause service interruptions...

CVE-2023-44283

In Dell SupportAssist for Home PCs between v3.0 and v3.14.1 and SupportAssist for Business PCs between v3.0 and v3.4.1, a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution o...

CVE-2023-25535

Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation LPE. This vulnerability only affects first-time installations done prior to 8th March 2023...

CVE-2023-25535

Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation LPE. This vulnerability only affects first-time installations done prior to 8th March 2023...

CVE-2023-44283

In Dell SupportAssist for Home PCs between v3.0 and v3.14.1 and SupportAssist for Business PCs between v3.0 and v3.4.1, a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution o...

CVE-2023-44283

Dell SupportAssist for Home PCs (versions 3.0–3.14.1) and Dell SupportAssist for Business PCs (versions 3.0–3.4.1) are affected. The vulnerability, affecting locally authenticated users, could allow privilege escalation and arbitrary code execution in the Windows system context on the local PC. T...

CVE-2023-44283

In Dell SupportAssist for Home PCs between v3.0 and v3.14.1 and SupportAssist for Business PCs between v3.0 and v3.4.1, a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution o...

CVE-2023-25535

The CVE-2023-25535 entry describes a local privilege escalation in Dell SupportAssist for Home PCs Installer Executable prior to version 3.13.2.19 used during initial installation, affecting first-time installs before 8 March 2023. Affected software/version: Dell SupportAssist for Home PCs Instal...

PT-2024-12065 · Dell · Dell Supportassist

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs Installer Executable versions prior to 3.13.2.19 Description: The issue affects the initial installation of Dell SupportAssist for Home PCs and can result in local privilege escalation LPE. This vulnerability...

Dell SupportAssist for Home PCs 安全漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. An elevation of privilege vulnerability exists in versions prior to Dell SupportAssist for Home PCs 3.13.2.19...

PT-2024-13185 · Dell +1 · Dell Supportassist For Home Pcs +2

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.0 through 3.14.1 Dell SupportAssist for Business PCs versions 3.0 through 3.4.1 Description: A security concern has been identified in Dell SupportAssist, impacting locally authenticated users on the...