CVE-2018-25041 uTorrent JSON RPC Server privileges management

A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

CVE-2018-25040

The CVE-2018-25040 issue affects uTorrent Web and involves the HTTP RPC Server component. The documented vulnerability allows privilege escalation via manipulation of an unknown functionality in the RPC server, with remote exploitation. Multiple sources corroborate that the exploit has been discl...

CVE-2018-25040 uTorrent Web HTTP RPC Server privileges management

A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HTTP RPC Server. The manipulation leads to privilege escalation. The attack can be launched remotely. The exploit has been disclosed to the publ...

PT-2022-8052

Name of the Vulnerable Software and Affected Versions uTorrent Web affected versions not specified Description A critical issue has been found, affecting an unknown functionality of the HTTP RPC Server component, which can lead to privilege escalation. This issue can be exploited remotely...

PT-2022-8053

Name of the Vulnerable Software and Affected Versions uTorrent affected versions not specified Description A critical issue affects some unknown functionality of the component JSON RPC Server in uTorrent, leading to privilege escalation. The attack can be launched remotely. Recommendations At the...

CVE-2018-25040: Improper Privilege Management

A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HTTP RPC Server. The manipulation leads to privilege escalation. The attack can be launched remotely. The exploit has been disclosed to the publ...

CVE-2018-25041: Improper Privilege Management

A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

Exploit for CVE-2022-26809

PoC-CVE-2022-26809 PoC for CVE-2022-26809, analisys and consi...

Incorrect Default Permissions in Supervisor

The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups...

Roundup xml-rpc server improper check of property permissions

The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the 1 list, 2 display, and 3 set methods...

tendermint:fuzz_rpc_jsonrpc_server: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5740700895936512 Project: tendermint Fuzzing Engine: libFuzzer Fuzz Target: fuzzrpcjsonrpcserver Job Type: libfuzzerasantendermint Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10c0000b0870 Crash State: NULL Sanitizer: address ASAN...

tendermint:fuzz_rpc_jsonrpc_server: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5181807589457920 Project: tendermint Fuzzing Engine: libFuzzer Fuzz Target: fuzzrpcjsonrpcserver Job Type: libfuzzerasantendermint Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Cra...

CVE-2021-32022

A low privileged delete vulnerability using CEF RPC server of BlackBerry Protect for Windows versions versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system and gaining the ability to delete...

CVE-2021-32022

Affected software: BlackBerry Protect for Windows (Cylance) up to version 1574. Issue: a low-privileged attacker could abuse the CEF RPC server to execute code in the context of the privileged Cylance service and gain the ability to delete data on the local system. Root cause described in public ...

PT-2021-19633

Name of the Vulnerable Software and Affected Versions: BlackBerry Protect for Windows versions 1574 and earlier Description: A low privileged delete vulnerability using the CEF RPC server could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has...

CVE-2021-32022: Undefined Security Weakness

A low privileged delete vulnerability using CEF RPC server of BlackBerry Protect for Windows versions versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system and gaining the ability to delete...

samba -- Multiple Vulnerabilities

The Samba Team reports: CVE-2020-25717: A user in an AD Domain could become root on domain members. CVE-2020-25718: Samba AD DC did not correctly sandbox Kerberos tickets issued by an RODC. CVE-2020-25719: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets. CVE-2020-25721:...

PT-2021-5387

Name of the Vulnerable Software and Affected Versions Samba affected versions not specified Description The issue is related to the use of 'association groups' in DCE/RPC, which allows sharing handles between multiple connections. These handles can reference connections to the sam.ldb database...

Use after free in Samba AD DC RPC server

Description In DCE/RPC it is possible to share the handles cookies for resource state between multiple connections via a mechanism called 'association groups'. These handles can reference connections to our sam.ldb database. However while the database was correctly shared, the user credentials...

Python < 2.7.17, 3.x < 3.5.8, 3.6.x < 3.6.10, 3.7.x < 3.7.5 XSS Vulnerability (bpo-38243) - Mac OS X

Python is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...