17473 matches found
Privilege escalation
Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-1155 Incorrect permissions for shared NI SystemLink Elixir based services
Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-1155
CVE-2024-1155 describes incorrect permissions in the installation directories for shared NI SystemLink Elixir based services, leading to potential privilege escalation via local access by an authenticated user. The root cause is improper permissions on installation paths that allow unauthorized l...
NI SystemLink Server Security Vulnerability
NI SystemLink Server is an application from NI that helps engineers implement cost-effective and locally managed test and measurement standardization, automation and digitization tools. A security vulnerability exists in NI SystemLink Server 2023 Q3 and prior versions, which stems from a failure ...
PT-2024-2166 · Vmware +1 · Vmware Enhanced Authentication Plug-In +1
Name of the Vulnerable Software and Affected Versions: VMware Enhanced Authentication Plug-in affected versions not specified Description: The issue is related to a Session Hijack vulnerability in the Deprecated VMware Enhanced Authentication Plug-in. This could allow a malicious actor with...
Zoom Client for Meetings < 5.17.0 Vulnerability (ZSB-24004)
The version of Zoom Client for Meetings installed on the remote host is prior to 5.17.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-24004 advisory. - Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of...
CVE-2023-6259 Local Access to Sensitive Data in Brivo ACS100 and ACS300
Insufficiently Protected Credentials, : Improper Access Control vulnerability in Brivo ACS100, ACS300 allows Password Recovery Exploitation, Bypassing Physical Security.This issue affects ACS100, ACS300: from 5.2.4 before 6.2.4.3...
Microsoft Windows Defender / Detection Bypass Part 3
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: https://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSDEFENDERTROJAN.WIN32.POWESSERE.GMITIGATIONBYPASSPART3.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows Defender...
Microsoft Windows Defender / Backdoor_JS.Relvelshe.A Detection / Mitigation Bypass
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: https://hyp3rlinx.altervista.org/advisories/WindowsDefenderBackdoorJS.Relvelshe.ADetectionMitigationBypass.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows Defender...
Microsoft Windows Defender Bypass - Detection Mitigation Bypass Vulnerability
Back in 2022, the researcher released a proof of concept to bypass the Backdoor:JS/Relvelshe.A detection in Windows Defender but it no longer works as it was mitigated. However, adding a simple javascript try catch error statement and eval'ing the hex string, it executes as of the time of this...
Intel Memory and Storage Tool < 2.3 Multiple Vulnerabilities (INTEL-SA-00967)
The version of Intel Memory and Storage Tool installed on the remote host is prior to 2.3. It is, therefore, affected by multiple vulnerabilities as referenced in the INTEL-SA-00967 advisory. - Improper initialization in some IntelR MAS software before version 2.3 may allow an authenticated user ...
Design/Logic Flaw
In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-41252
Out-of-bounds read in some IntelR QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-42776
Improper input validation in some IntelR SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access...
CVE-2023-41252
Out-of-bounds read in some IntelR QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-41231
Incorrect default permissions in some ACAT software maintained by IntelR before version 2.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-41231
Incorrect default permissions in some ACAT software maintained by IntelR before version 2.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-41090
Race condition in some IntelR MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access...