CVE-2024-43553 NT OS Kernel Elevation of Privilege Vulnerability

...

CVE-2024-43553

CVE-2024-43553 is an NT OS Kernel elevation-of-privilege vulnerability associated with Windows NT OS Kernel. The connected data explicitly maps this CVE to Windows NT OS Kernel with a high impact (privilege escalation). The NCSC advisory notes that vulnerabilities in Windows have been fixed, and ...

PT-2024-6917 · Microsoft · Nt Os Kernel +1

Name of the Vulnerable Software and Affected Versions: NT OS Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the NT OS Kernel, which can be exploited by attackers to affect the system. It is associated with the dereference of ...

CVE-2024-43553: Untrusted Pointer Dereference

NT OS Kernel Elevation of Privilege Vulnerability...

The vulnerability of the NTLM protocol implementation in the backup and recovery software for remote and cloud-based Veeam Service Provider Console (VSPC) users allows a hacker to bypass authentication procedures and gain unauthorized access to protected information.

The vulnerability of the NTLM protocol implementation in the backup and recovery software for remote and cloud-based Veeam Service Provider Consoles is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures an...

CVE-2024-1578: Improper Validation of Specified Type of Input

The MiCard PLUS Ci and MiCard PLUS BLE reader products developed by rf IDEAS and rebranded by NT-ware have a firmware fault that may result in characters randomly being dropped from some ID card reads, which would result in the wrong ID card number being assigned during ID card self-registration...

CVE-2024-42019

A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user interaction and data collected from Veeam Backup & Replication...

Veeam ONE 安全漏洞

Veeam ONE is a suite of IT monitoring and reporting tools from Veeam USA. The product supports features such as backup monitoring, operational status monitoring of virtual and physical environments. A security vulnerability exists in Veeam ONE version 12.1.0.3208 and previous versions 12, which...

CVE-2024-38456

The HIGH-LEIT automated control system by Vivavis for Windows versions V05.08.01.03 and V04.25.00.00 through 4.25.01.01 is affected by an insecure file and folder permissions vulnerability in prunsrv.exe . This authorization issue allows a regular non-admin user to exploit weak permissions to ach...

CVE-2024-38456

HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vulnerability in prunsrv.exe. A regular user non-admin can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the...

CVE-2024-38456

HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vulnerability in prunsrv.exe. A regular user non-admin can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the...

CVE-2024-1621

The CVE-2024-1621 issue affects uniFLOW Online (NT-ware) where the registration process can be compromised when email login is enabled on the tenant, prior to and including version 2024.1.0. The vulnerability allows an attacker to register themselves against a genuine user, enabling a malicious u...

NT-ware uniFLOW Online 安全漏洞

NT-ware uniFLOW Online is a secure public cloud printing and scanning solution from NT-ware. A security vulnerability exists in NT-ware uniFLOW Online version 2024.1.0 and prior versions, which stems from the possibility that tenants may be compromised when email login is enabled. The vulnerabili...

PT-2024-28012

Name of the Vulnerable Software and Affected Versions HIGH-LEIT versions 04.25.00.00 through 04.25.01.01 HIGH-LEIT version 05.08.01.03 Description The issue concerns an insecure file and folder permissions vulnerability in the prunsrv.exe file. This vulnerability can be exploited by a regular use...

DIAEnergie 1.10 SQL Injection Exploit

This Metasploit module exploit a remote SQL injection vulnerability in the CBEC service of DIAEnergie versions 1.10 and below from Delta Electronics. The commands will get executed in the context of NT AUTHORITY\SYSTEM. class MetasploitModule 'DIAEnergie SQL Injection CVE-2024-4548', 'Description...

DIAEnergie 1.10 SQL Injection

class MetasploitModule 'DIAEnergie SQL Injection CVE-2024-4548', 'Description' = %q SQL injection vulnerability in DIAEnergie MSFLICENSE, 'Author' = 'Michael Heinzl', MSF exploit 'Tenable' Discovery & PoC , 'References' = 'URL', 'https://www.tenable.com/security/research/tra-2024-13', 'CVE',...

LG Simple Editor 3.21.0 Command Injection Exploit

LG Simple Editor versions 3.21.0 and below suffer from an unauthenticated command injection vulnerability. The vulnerability can be exploited by a remote attacker to inject arbitrary operating system commands which will get executed in the context of NT AUTHORITY\SYSTEM. class MetasploitModule 'L...

PT-2024-8111

Name of the Vulnerable Software and Affected Versions: SINEC NMS versions prior to V3.0 Description: A vulnerability has been identified in the affected application, which executes a subset of its services as NT AUTHORITYSYSTEM. This could allow a local attacker to execute operating system comman...

CVE-2024-36398: Execution with Unnecessary Privileges

A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application executes a subset of its services as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...

Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities

Microsoft said it is developing security updates to address two loopholes that it said could be abused to stage downgrade attacks against the Windows update architecture and replace current versions of the operating system files with older versions. The vulnerabilities are listed below -...