CVE-2014-0816

CVE-2014-0816 This is an exploit for CVE-2014-0816 JVNDB-2014-000026: Norman Security Suite vulnerable to privilege escalation. This exploit launches CMD.exe with SYSTEM privilege from Non-Administrator privilege by exploiting the vulnerability in an IOCTL handler of ngs.sys / ngs64.sys. Usage...

Cleartext Storage of Sensitive Information

Overview Affected versions of this package are vulnerable to Cleartext Storage of Sensitive Information through the clusterregistrationtoken API/store paths, pkg/capr/planner/agent.go, pkg/provisioningv2/prebootstrap/resolve.go, and pkg/controllers/capr/managesystemagent/managesystemagent.go. An...

An ICE Firearms Trainer Was Involved in At Least 4 Deadly Shootings

David Norman, a former Phoenix police officer who’s described himself as “a fucking savage,” now runs a company that provided training to Homeland Security’s Special Response Teams...

EUVD-2005-3377

Malware in sbrugna...

EUVD-2008-5510

Malware in sbrugna...

EUVD-2012-1446

Malware in sbrugna...

EUVD-2012-1452

Malware in sbrugna...

EUVD-2007-3936

Malware in sbrugna...

EUVD-2007-3937

Malware in sbrugna...

EUVD-2007-1191

Malware in sbrugna...

EUVD-2014-0846

Malware in sbrugna...

EUVD-2020-29374

Malware in sbrugna...

CVE-2020-8508

nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled...

CVE-2010-5167

Race condition in Norman Security Suite PRO 8.0 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...

CVE-2023-32193

A vulnerability has been identified in which unauthenticated cross-site scripting XSS in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely...

CVE-2023-32193 Norman API Cross-site Scripting Vulnerability

A vulnerability has been identified in which unauthenticated cross-site scripting XSS in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely...

CVE-2023-32193: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

A vulnerability has been identified in which unauthenticated cross-site scripting XSS in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely...

GO-2024-2536 Cross-site scripting in public API in github.com/rancher/norman

Cross-site scripting in public API in github.com/rancher/norman...

Cross Site Scripting (XSS)

github.com/rancher/norman is vulnerable to Cross Site Scripting XSS . The vulnerability is due to a lack of URL validation within the ParseRequestURL method. An attacker can execute arbitrary JavaScript by sending a crafted payload to a public API endpoint, resulting in XSS...

SUSE CVE-2023-32193

A vulnerability has been identified in which unauthenticated cross-site scripting XSS in Norman's public API endpoint can be exploited. This can lead to an attacker exploiting the vulnerability to trigger JavaScript code and execute commands remotely...