Exploit for SQL Injection in Online_Bus_Booking_System_Project Online_Bus_Booking_System

CVE-2020-25273 Online Bus Booking System 1.0, there is Authen...

CVE-2020-14027

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The database connection strings accept custom unsafe arguments, such as ENABLELOCALINFILE, that can be leveraged by attackers to enable MySQL Load Data Local rogue MySQL server attacks...

CVE-2020-6574

Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker to potentially achieve privilege escalation via a crafted binary...

CVE-2020-7358 Code Injection in Rapid7 AppSpider Pro Installer

In AppSpider installer versions prior to 7.2.126, the AppSpider installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This would prevent the installer from distinguishing between a valid executable called during an...

Google Android WindowManager Privilege Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A privilege escalation vulnerability exists in the Android-11 version of WindowManager, which stems from launching a malicious application and allows an attacker to escalate privileges locally...

Helm Cross-Site Scripting Vulnerability

helm is a Kubernetes package manager. A security vulnerability exists in Helm versions prior to 2.16.11 and 3.3.2, which can be exploited by an attacker to launch a local attack...

CVE-2020-25212

CVE-2020-25212 affects the NFSv4 client in the Linux kernel and is caused by a TOCTOU mismatch where a size check is performed in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c. This can allow a local attacker to corrupt memory or cause unspecified impacts. The issue is addressed in the upstream k...

Windows Graphics Component Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability b...

FreeBSD : Mbed TLS -- Local side channel attack on classical CBC decryption in (D)TLS (4c69240f-f02c-11ea-838a-0011d823eebd)

Manuel Pegourie-Gonnard reports : When decrypting/authenticating DTLS record in a connection using a CBC ciphersuite without the Encrypt-then-Mac extension RFC 7366, Mbed TLS used dummy rounds of the compression function associated with the hash used for HMAC in order to hide the length of the...

CVE-2020-23834

CVE-2020-23834 affects Real Time Logic BarracudaDrive v6.5, where insecure permissions on the bd service executable (%SYSTEMDRIVE%\bd\bd.exe) allow a local attacker to replace the file and cause the next boot to run a new bd.exe as LocalSystem, enabling privilege escalation. Documented impact is ...

CVE-2020-8023

CVE-2020-8023 affects openldap2 across multiple SUSE/SOLAS distributions (e.g., SUSE Enterprise Storage 5, SLES variants, openSUSE Leap 15.1/15.2, SAP editions, OpenStack Cloud). The issue is a local privilege escalation triggered by an acceptance of Extraneous Untrusted Data With Trusted Data in...

USN-4479-1: Django vulnerabilities

It was discovered that Django, when used with Python 3.7 or higher, incorrectly handled directory permissions. A local attacker could possibly use this issue to obtain sensitive information, or escalate permissions...

CVE-2020-5378

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFIBOOTSERVICES structure to execute arbitrary code in System Management Mode SMM...

CVE-2020-17393

The CVE-2020-17393 issue affects Parallels Desktop (15.1.3-47255) through the prl_hypervisor kext. A lack of proper validation of user-supplied data can leak a kernel pointer after the handler completes, enabling local information disclosure. While the advisory notes this could be leveraged along...

Dell Encryption and Dell Endpoint Security Suite Elevation of Privilege Vulnerability

Dell Encryption and Dell Endpoint Security Suite are both products of Dell Inc.Dell Encryption is a data protection solution. Dell Encryption is a data protection solution that includes compliance management, authentication, disk data encryption, and port encryption.Dell Endpoint Security Suite i...

MGASA-2020-0333 Updated kernel packages fix security vulnerability

This provides an update to kernel 5.7 series, currently based on upstream 5.7.14 adding support for new hardware and features, and fixes at least the following security issues: An issue was discovered in the Linux kernel through 5.3.9. There is a use-after-free when aalabelparse fails in...

PT-2020-3980 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to the improper handling of objects in memory by the Windows Graphics Component, allowing an attacker to potentially run processes in an elevated...

CVE-2020-7352

CVE-2020-7352 context : The GalaxyClientService in GOG Galaxy runs as SYSTEM on Windows. It ships with an embedded, static RSA private key and listens on localhost:9978, enabling a local attacker with user privileges to execute OS commands in elevated context via crafted inputs. The issue affects...

CVE-2020-5384

Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerability. A local unauthenticated attacker could potentially exploit this vulnerability by using an alternate path to bypass authentication in order to gain full access to the system...

Windows Graphics Component Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability b...