CVE-2023-20036: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the web UI of Cisco IND could allow an authenticated, remote attacker to execute arbitrary commands with administrative privileges on the underlying operating system of an affected device. This vulnerability is due to improper input validation when uploading a Device Pack. An...

CVE-2024-9500: Creation of Temporary File in Directory with Insecure Permissions

A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management...

Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs

Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager NTLM and Task Scheduler have come under active exploitation in the wild. The security vulnerabilities are among the 90 security bugs the tech giant addressed as part of its Patch Tuesday update for November 202...

November Patch Tuesday release contains three critical remote code execution vulnerabilities

The Patch Tuesday for November of 2024 includes 89 vulnerabilities, including four that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the four "critical" vulnerabilities is "less likely." CVE-2024-43639 ...

November Microsoft Patch Tuesday

November Microsoft Patch Tuesday. 125 CVEs, 35 of which were added since October MSPT. 2 vulnerabilities with signs of exploitation in the wild: Elevation of Privilege - Windows Task Scheduler CVE-2024-49039 Disclosure/Spoofing - NTLM Hash CVE-2024-43451 No signs of exploitation, but with a priva...

Microsoft and Adobe Patch Tuesday, November 2024 Security Update Review

Microsoft has released its November 2024 Patch Tuesday updates, targeting various vulnerabilities that could impact users and organizations worldwide. From zero-day threats to key product patches, here’s what’s crucial to apply this month. Here’s a breakdown of the updates and how they impact you...

CVE-2024-43623 Windows NT OS Kernel Elevation of Privilege Vulnerability

...

CVE-2024-43623

CVE-2024-43623 is documented across connected sources as a Windows NT OS Kernel elevation-of-privilege vulnerability. The ENISA/NCSC summary and related Microsoft patch-coverage references confirm it affects the Windows NT OS Kernel and was addressed via the November 2024 update cycle (e.g., KB50...

KLA77106 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code...

PT-2024-8075 · Microsoft · Windows Nt Os Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows NT OS Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows NT OS Kernel, which is caused by an integer overflow. This vulnerability can be exploited by an...

CVE-2024-43623: Integer Overflow or Wraparound

Windows NT OS Kernel Elevation of Privilege Vulnerability...

CVE-2024-50592 Local Privilege Escalation via Race Condition

An attacker with local access the to medical office computer can escalate his Windows user privileges to "NT AUTHORITY\SYSTEM" by exploiting a race condition in the Elefant Update Service during the repair or update process. When using the repair function, the service queries the server for a lis...

CVE-2024-50592

The Elefant software (versions prior to 1.4.2.1811 ) is vulnerable to a Time-of-check Time-of-use (TOCTOU) race condition in its Update Service during the repair or update process. An attacker with local access can exploit this by overwriting either PostESUUpdate.exe or Update_OpenJava.exe in the...

CVE-2024-50591

The Elefant Software Updater (ESU) , a component of the HASOMED Elefant exercise software, contains a command injection vulnerability. An attacker with local access to a medical office computer can escalate privileges to NT AUTHORITYSYSTEM by communicating with the ESU service via Windows Named P...

CVE-2024-50590

The HASOMED Elefant medical office software is vulnerable to local privilege escalation due to incorrect default permissions (CWE-276, CWE-732, CWE-250). The default installation directory, C:\Elefant1, is writable by all users. The installer registers two Firebird database services —fbserver.exe...

CVE-2024-50588

An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other sensitive data. In addition, this enabl...

CVE-2024-7995: Untrusted Search Path

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution...

CVE-2022-23862

A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running under the "NT Authority\System" user, an attacker is able to use the...

PT-2024-11526

Name of the Vulnerable Software and Affected Versions Y Soft SAFEQ version 6 Build 53 Description A Local Privilege Escalation issue was discovered. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running und...

CVE-2022-23862: Missing Authentication for Critical Function

A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running under the "NT Authority\System" user, an attacker is able to use the...