Windows NTFS Privilege Escalation

The vulnerability of the NTFS file system in Windows operating systems is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

libxpc Code Execution Root Privileges

The vulnerability of the libxpc library in MacOS operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code with root privileges...

D-View 8 showUser Privilege Escalation

The vulnerability of the showUser method in the D-View 8 network device management platform is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

newbee-mall security vulnerability

newbee-mall is an e-commerce system. A security vulnerability exists in previous versions of newbee-mall 1f2c2dfy, which stems from an insecure privilege setting in the updateUserInfo function and can be exploited by an attacker to obtain user account information...

Windows RPCSS Privilege Escalation

The vulnerability of the Remote Procedure Call Service RPCSS in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Voyager security vulnerabilities

Voyager is an application by David Borland Personal Developer. A security vulnerability exists in Voyager version v.1.4 and earlier versions, which stems from the presence of an insecure privilege vulnerability. An attacker can exploit this vulnerability to execute arbitrary code via specially...

PT-2023-9001 · Vmware · Vmware Fusion

Name of the Vulnerable Software and Affected Versions: VMware Fusion affected versions not specified Description: The issue is related to a local privilege escalation, where a malicious actor with read/write access to the host operating system can gain root access. This is due to insecure privile...

OpenGoofy Hippo4j security vulnerabilities

OpenGoofy Hippo4j is a powerful dynamic thread pooling framework from OpenGoof that comes with monitoring and alerting features. A security vulnerability exists in OpenGoofy Hippo4j v.1.4.3, which stems from an insecure privilege setting. An attacker can exploit the vulnerability to obtain...

Windows Accounts Picture Privilege Escalation

The vulnerability of the Windows Accounts Picture component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2023-1775 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insecure privilege management in the Windows Graphics Component. It allows an attacker to elevate their privileges. There is no information provid...

PT-2023-1766 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Accounts Picture component, allowing an attacker to elevate their privileges. This can affect the system. Recommendation...

ZBT WE1626 security vulnerabilities

ZBT WE1626 is a router. A security vulnerability exists in the ZBT WE1626 v21.06.18 version, which stems from the presence of an insecure privilege vulnerability that can be exploited by an attacker to obtain sensitive information...

PT-2023-9632 · Qemu · Qemu Guest Agent

Name of the Vulnerable Software and Affected Versions: QEMU Guest Agent affected versions not specified Description: A flaw was found in the QEMU Guest Agent service for Windows, allowing a local unprivileged user to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to...

PT-2022-7148 · Openstack +1 · Openstack +2

Name of the Vulnerable Software and Affected Versions: OpenStack versions prior to git master 05194e7618 Description: A privilege escalation issue exists in the oslo.privsep functionality of OpenStack. This is due to overly permissive functionality within tools that leverage this library within a...

RealVNC Privilege Escalation

The vulnerability of the RealVNC remote access software is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges by using the MSI installer Repair feature...

Active Directory Certificate Service Privilege Escalation

The vulnerability of the Active Directory Certificate service on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

win32k Privilege Escalation

The vulnerability of the win32k component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Windows Hyper-V Privilege Escalation

The vulnerability of the Windows Hyper-V hardware virtualization system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

Python multiprocessing Privilege Escalation

The vulnerability of the multiprocessing interpreter for the Python programming language on Linux is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...