CVE-2024-34017

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...

CVE-2024-34017

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...

CVE-2024-34017

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...

CVE-2024-34017

CVE-2024-34017 affects Acronis Snap Deploy on Windows prior to build 4569, caused by a DLL hijacking flaw that enables local privilege escalation. The vulnerability arises in the product’s handling of DLLs, allowing an attacker with local access and low privileges to escalate privileges (as descr...

CVE-2024-34017

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...

CVE-2024-34019

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...

CVE-2024-34019

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy Windows before build 4569...

CVE-2024-34019

CVE-2024-34019 involves a DLL hijacking local privilege escalation affecting Acronis Snap Deploy on Windows prior to build 4569. The Red Hat and NVD entries corroborate the same vulnerability description: local privilege escalation due to DLL hijacking, with affected software being Acronis Snap D...

PT-2024-25643 · Acronis · Acronis Snap Deploy

Name of the Vulnerable Software and Affected Versions: Acronis Snap Deploy Windows versions prior to build 4569 Description: The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This vulnerability allows attackers to increase their privileges locally in certa...

Acronis Snap Deploy 代码问题漏洞

Acronis Snap Deploy is a platform for bulk deployment of system images from Acronis Singapore. A code issue vulnerability previously existed in Acronis Snap Deploy version 4569, which stemmed from the inclusion of a DLL hijacking vulnerability leading to local elevation of privilege...

CVE-2024-3982

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator...

CVE-2024-3982

CVE-2024-3982 affects Hitachi Energy MicroSCADA X SYS600. A local attacker could enable the product’s session logging and attempt to hijack an already established session. By default, session logging is disabled and only administrators can enable it. Several connected sources also describe a loca...

CVE-2024-3982

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator...

CVE-2024-3982

An attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the session logging supporting the product and try to exploit a session hijacking of an already established session. By default, the session logging level is not enabled and only users with administrator...

Hitachi Energy MicroSCADA X SYS600 安全漏洞

Hitachi Energy MicroSCADA X SYS600 is a SCADA product from Hitachi, Japan. It ensures optimal control and reliable operation of your switching station through seamless integration and connectivity between different devices and systems. A security vulnerability exists in Hitachi Energy MicroSCADA ...

The vulnerability of the aiohttp HTTP client, related to deficiencies in HTTP request processing, allows attackers to execute the “HTTP request hijacking” attack.

The vulnerability of the aiohttp HTTP client is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute an “HTTP request hijacking” attack...

Fur Affinity Website Hacked in DNS Hijacking Attack

Fur Affinitys domain and Twitter were compromised in a major DNS hijacking on August 20, 2024. Hackers redirected…...

Rockwell Automation Emulate3D

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 5.4 ATTENTION : Exploitable locally Vendor : Rockwell Automation Equipment : Emulate3D Vulnerability : Externally Controlled Reference to a Resource in Another Sphere 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

ZZCMS HTTP_REFERER header cross-site scripting vulnerability

ZZCMS is a content management system CMS by the ZZCMS team in China. A cross-site scripting vulnerability exists in ZZCMS v2023 and earlier versions, which stems from incorrect HTTPREFERER header handling, and can be exploited by an attacker to execute malicious scripts via specially crafted URLs...

Capsule tenant owner with "patch namespace" permission can hijack system namespaces

Attack Vector Then, let me briefly explain the reasons for the errors mentioned above: 1. The 'kubectl edit' command was used to patch the namespace, but this operation requires both 'get' and 'patch' permissions, hence the error. One should use methods like 'curl' to directly send a PATCH reques...