Win32k Memory Disclosure

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Security Vulnerabilities fixed in Thunderbird 78.2 — Mozilla

If Thunderbird is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back...

Security Vulnerabilities fixed in Firefox ESR 78.2 — Mozilla

If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back to ...

Unspecified vulnerability in ImageIO component of multiple Apple products (CNVD-2020-49297)

Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.ImageIO ImageIO is a component that reads and writes image data. A security vulnerability exists in...

Microsoft Windows and Microsoft Windows Server Information Disclosure Vulnerability (CNVD-2020-48269)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in RPC in Microsoft Windows and Microsoft...

Windows Installer Privilege Escalation

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

Travel Management System 1.0 Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Travel Management System v1.0 - Unauthenticated Remote Code Execution Exploit Author: Adeeb Shah @hyd3sec & Bobby Cooke boku Vulnerability Discovery: Adeeb Shah @hyd3sec Date: August 10, 2020 Vendor Homepage:...

CVE-2020-7205

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...

Information disclosure

A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arbitrary code execution during the boot process. Note: This vulnerability is related to using insmod...

GRUB2 Vulnerability – AKA

No description provided...

PT-2020-6884 · Apple +7 · Ipados +14

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 Safari versions prior to 13.1.2 iTunes versions prior to 12.10.8 for Windows iCloud for Windows versions prior to 11.3 iClo...

Denial of Service Vulnerability in OPEN OFFICE

OPEN OFFICE is a set of cross-platform office software, can be executed on WINDOWS, LINUX, MACOS, X X11 and SOLARIS and other operating systems, and each of the major office software suite is compatible with a lot of office software are based on it for secondary development. A denial of service...

Connected User Experiences and Telemetry Services Unauthorized Access

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-65605)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in Microsoft Windows/Windo...

RIOT buffer overflow vulnerability

RIOT RIOT-OS is a set of operating systems for applications in the IoT field. A buffer error vulnerability exists in the base64 decoder in RIOT version 2020.04, which stems from the program not properly checking boundaries. A remote attacker can exploit this vulnerability to execute arbitrary cod...

Windows Modules Installer Service Privilege Escalation

The vulnerability of the Windows Modules Installer Service in operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Installer Privilege Escalation

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

IIS Privilege Escalation

The vulnerability of the Microsoft Internet Information Server IIS server, due to the Windows Background Intelligent Transfer Service BITS, affects operating systems running on Windows. This vulnerability is related to file operation processing errors. Exploiting this vulnerability can allow an...

NetEase(163,126) Mail Persistent XSS Vulnerability

This ia a 0day XSS vulnerability. The vulnerability for Netease email163,126 that works on all operating systems and browsers. Android and iPhone sometimes don't work You can easily obtain the users session and password with this XSS. Also, QQ-XSS vulnerability will be uploaded soon. Thank you...

Mac OS X Use-After-Free

Multiple vulnerabilities exist in operating systems such as Mac OS X, iOS, tvOS, watchOS, the browser Safari, the multimedia player iTunes for Windows, and the iCloud service for Windows. These vulnerabilities are related to the use of memory after it is freed. Exploitation of these vulnerabiliti...