19389 matches found
Open-Xchange OX App Suite 跨站脚本漏洞
Open-Xchange OX App Suite is an e-mail and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange OX App Suite version 7.10.6 and earlier, which originates from the fact that a contact that does not contain a name but only an email address ca...
CVE-2022-38801
The CVE-2022-38801 entry affects Zkteco BioTime prior to 8.5.3 Build:20200816.447, where an employee can hijack an administrator session and cookies via blind cross-site scripting. The vulnerability is caused by a cross-site scripting flaw in BioTime, enabling session takeover and cookie access. ...
Open-Xchange OX App Suite 跨站脚本漏洞
Open-Xchange OX App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange OX App Suite 7.10.6 and prior versions, which stems from a plain text email containing HTML code that can be used to inject script code when...
Open-Xchange OX App Suite 跨站脚本漏洞
Open-Xchange OX App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange OX App Suite 7.10.6 and prior versions, which stems from a vulnerability that allows an attacker to use a special character that registers a...
CVE-2022-38801
In Zkteco BioTime 8.5.3 Build:20200816.447, an employee can hijack an administrator session and cookies using blind cross-site scripting...
Ubuntu 16.04 ESM / 18.04 LTS : libICE vulnerability (USN-5744-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5744-1 advisory. It was discovered that libICE was using a weak mechanism to generate the session cookies. A local attacker could possibly use this issue to perform a...
AVEVA Edge DLL Hijacking Vulnerability
AVEVA Edge is a highly scalable and flexible HMI/SCADA software from AVEVA Software UK. A DLL hijacking vulnerability exists in AVEVA Edge 2020 R and prior versions, which could be exploited by an attacker to compromise the confidentiality, availability or integrity of a system. Details of the...
Audience Hijacking ? A Retailer?s Grinch This Holiday Season
Understand the significant threat that audience hijacking poses to customer online buying journeys and retailers? revenue this holiday season...
AVEVA Edge 安全漏洞
AVEVA Edge is a highly scalable and flexible HMI/SCADA software from AVEVA Software UK. A DLL hijacking vulnerability exists in AVEVA Edge 2020 R and prior versions, which could be exploited by an attacker to compromise the confidentiality, availability or integrity of a system. Details of the...
Python 2.7.x DLL Hijacking Vulnerability
Python is prone to a DLL hijacking vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"; ifdescription...
CVE-2022-40746
IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this...
CVE-2022-40746
IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this...
CVE-2022-40746
IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this...
CVE-2022-40746
CVE-2022-40746 affects IBM i Access Client Solutions (IBM i Access Family) versions 1.1.2–1.1.4 and 1.1.4.3–1.1.9.0. The root cause is a DLL search order hijacking vulnerability that could allow a local authenticated attacker to execute arbitrary code by placing a specially crafted file in a comp...
CVE-2022-45422
When LG SmartShare is installed, local privilege escalation is possible through DLL Hijacking attack. The LG ID is LVE-HOT-220005...
Privilege escalation
When LG SmartShare is installed, local privilege escalation is possible through DLL Hijacking attack. The LG ID is LVE-HOT-220005...
Notorious Emotet Malware Returns With High-Volume Malspam Campaign
The notorious Emotet malware has returned with renewed vigor as part of a high-volume malspam campaign designed to drop payloads like IcedID and Bumblebee. "Hundreds of thousands of emails per day" have been sent since early November 2022, enterprise security company Proofpoint said last week,...
CVE-2022-45422
CVE-2022-45422 concerns LG SmartShare. The vulnerability enables local privilege escalation via a DLL hijacking flaw during installation of LG SmartShare. Sources consistently describe the issue as a local elevation of privilege (no remote/vector exploitation details documented here). The current...
PT-2022-27505 · Lg · Lg Smartshare
Name of the Vulnerable Software and Affected Versions: LG SmartShare affected versions not specified Description: The issue allows for local privilege escalation through a DLL Hijacking attack when LG SmartShare is installed. Recommendations: At the moment, there is no information about a newer...