Exploit for Improper Privilege Management in Sudo_Project Sudo

CVE-2023-22809 Analysis & Exploit Basic Information V...

The vulnerability of Hirschmann Network Management Industrial HiVision software, related to privilege management errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Hirschmann Network Management Industrial HiVision software is related to privilege management errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

ROS-20230619-01

The vulnerability in the GLPI web application is related to insufficient cleansing of user data in the administration panel of the administration panel, a user could inject and execute arbitrary HTML code and script in the browser of a user's browser in the context of a vulnerable website...

The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the NTFS file system in Windows operating systems is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2023-2847

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied th...

Privilege escalation

During internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product installed, it was possible for a user with lower privileges due to improper privilege management to trigger actions with root privileges. ESET remedied th...

CVE-2023-2847

CVE-2023-2847 describes a local privilege escalation in ESET products for Linux/macOS caused by improper privilege management. A user with lower privileges could trigger actions with root-level privileges; affected components include ESET Server Security for Linux, Endpoint Antivirus for Linux/ma...

Eset Server Security 安全漏洞

ESET Eset Server Security is an It solution from ESET Slovakia. It is used to block peripheral malware as well as suspicious Web and Ftp traffic. A security vulnerability exists in some ESET products, which stems from improper privilege management. The vulnerability can be exploited by an attacke...

PT-2023-3648 · Eset · Eset Server Security +2

Name of the Vulnerable Software and Affected Versions: ESET Server Security affected versions not specified ESET Endpoint Antivirus affected versions not specified ESET Cyber Security affected versions not specified ESET Endpoint Antivirus affected versions not specified Description: A local...

CVE-2023-34120

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by t...

Input validation

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by t...

CVE-2023-34120

CVE-2023-34120 affects Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows prior to 5.14.0. The issue is improper privilege management that could let an authenticated user spawn processes with escalated privileges via local access. Impacts include potential elevation of privilege w...

CVE-2023-34120

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by t...

CVE-2023-34120

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by t...

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to insecure management of privileges, allows attackers to compromise the integrity of protected information.

The vulnerability of the Web page rendering module in WebKit of the Apple Safari browser, as well as in Apple’s Mac OS, iOS, iPadOS, watchOS, and tvOS operating systems, is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to compromise the...

PT-2023-3133 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows NTFS file system, which is caused by insecure privilege management. This vulnerability can be exploited b...

PT-2023-3427 · Zoom · Zoom For Windows +2

Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Zoom Rooms for Windows versions prior to 5.14.0 Zoom VDI for Windows versions prior to 5.14.0 Description: The issue is related to improper privilege management, which may allow an authenticated user ...

Zoom Client for Meetings < 5.14.0 Vulnerability (ZSB-23012)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23012 advisory. - Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14...

Improper Privilege Management

github.com/rancher/rancher is vulnerable to Improper Privilege Management. The vulnerability exists because the library allowed standard users or above to elevate their permissions to Administrator in the local cluster, which can lead to manipulating Kubernetes secrets or gaining access to tokens...

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series systems relates to insecure privilege management, allowing attackers to elevate their privileges to the root level.

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series buildings is related to insecure privilege management. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...