The vulnerability of the web server of the microprogramming software for asynchronous servers Moxa NPort 5100A allows a hacker to increase their privileges.

The vulnerability of the web server of Moxa NPort 5100A microprogramming software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

PT-2024-4593 · Sap · Sap Student Life Cycle Management

Name of the Vulnerable Software and Affected Versions: SAP Student Life Cycle Management SLcM affected versions not specified Description: The issue is related to insufficient authorization checks in the SAP Student Life Cycle Management SLcM system, which can lead to the escalation of privileges...

PT-2024-25952 · Yvan Dotet · Postgresql Query Deluxe

Name of the Vulnerable Software and Affected Versions: Yvan Dotet PostgreSQL Query Deluxe module versions 17.x before 17.0.0.4 Description: A SQL injection issue allows a remote attacker to gain privileges via the query parameter to models/querydeluxe.py:QueryDeluxe::get result from query. This...

The vulnerability of the PowerPanel Business monitoring and power source management system, related to the use of pre-installed account data, allows a perpetrator to increase their privileges.

The vulnerability of the PowerPanel Business monitoring and power source management system is related to the use of pre-installed account data. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

CVE-2024-33775

An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a crafted Dashlet...

PT-2024-25264 · Onethink · Onethink

Name of the Vulnerable Software and Affected Versions: onethink version 1.1 Description: A SQL injection issue allows a remote attacker to escalate privileges via a crafted script to the ModelModel.class.php component. Recommendations: For onethink version 1.1, consider restricting access to the...

PHP Task Management System SQL注入漏洞

SourceCodester Task Management System is a task management system. A SQL injection vulnerability exists in PHP Task Management System version v.1.0, which could allow remote attackers to escalate privileges and obtain sensitive information via the taskid parameter of the task-details.php and...

CVE-2024-32405

Cross Site Scripting vulnerability in inducer relate before v.2024.1 allows a remote attacker to escalate privileges via a crafted payload to the Answer field of InlineMultiQuestion parameter on Exam function...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to the incorrect implementation of the authentication algorithm. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the “Enter Package Data” component of the SAP Group Reporting Data Collection software allows a perpetrator to enhance their privileges and compromise the integrity of the data.

The vulnerability of the “Enter Package Data” component in the SAP Group Reporting Data Collection software relates to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely and compromise the integrity of data...

The vulnerability of the Etcd configuration store, related to incorrect authentication, allows attackers to escalate their privileges.

The vulnerability of the Etcd configuration store is related to the sending of authentication requests to the etcdserver with a username and password. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

The vulnerability of Dell Enterprise SONiC operating systems, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of Dell Enterprise SONiC operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

ROS-20240411-02

The Etcd configuration parameter store vulnerability is related to sending an authentication request to the etcdserver with a username and password. Exploitation of the vulnerability could allow an attacker, acting remotely to escalate their privileges...

PT-2024-22896 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Humble Hawksbill versions 2 Description: An unauthorized node injection issue allows remote attackers to escalate privileges and inject malicious ROS2 nodes into the system. Recommendations: For ROS2 Humble Hawksbill version 2, consider...

PT-2024-4666 · Microsoft · Azure Arc-Enabled Kubernetes Extension Cluster

Name of the Vulnerable Software and Affected Versions: Azure Arc-enabled Kubernetes Extension Cluster affected versions not specified Description: The issue is related to insufficient access controls in Azure Arc-enabled Kubernetes extensions, which can be exploited by a remote attacker to elevat...

PT-2024-2831 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to insufficient access control in Microsoft Defender for IoT, which could allow a remote attacker to elevate their privileges. Recommendations: At th...

PT-2024-3201 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to inadequate access control in Microsoft Defender for IoT, which can be exploited by a remote attacker to elevate their privileges. Recommendations:...

PT-2024-3200 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to inadequate access control in Microsoft Defender for IoT, which can be exploited by a remote attacker to elevate their privileges. Recommendations:...

PT-2024-23558 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: The issue allows a malicious user to escalate privileges by injecting malicious ROS2 nodes into the system remotely. Recommendations: For ROS2 Iron Irwini version 2, at the moment, there is no...

The vulnerability of the Grafana monitoring and surveillance platform, related to bypassing authentication through spearphishing, allows attackers to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability of the Grafana monitoring and observation platform is related to the escalation of privileges from the administrator to another administrator when using a authentication proxy server. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...