The vulnerability of Group Policy Services in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of Group Policy Services in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer arises from the lack of measures taken to protect the SQL query structure. This allows attackers to enhance their privileges.

The vulnerability of the software for processing and transmitting confidential data in Progress MOVEit Transfer is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the GPON-terminal software of Tenda G103, related to the lack of measures for cleaning input data, allows a intruder to enhance their privileges and execute arbitrary commands.

The vulnerability of the GPON-terminal software of Tenda G103 is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and execute arbitrary commands...

The vulnerability of the OpenAPI interface of the Cisco Secure Workload protection tool for multi-cloud data centers (previously known as Tetration) allows a malicious actor to escalate their privileges.

The vulnerability of the OpenAPI interface of the Cisco Secure Workload protection tool for multi-cloud data centers relates to shortcomings in role-based access control when performing operations. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

PT-2023-3184 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Description: The issue is related to insufficient access control in Microsoft SharePoint Server,...

PT-2023-3742 · D Link · D-Link Dir-600

Name of the Vulnerable Software and Affected Versions: D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 Description: The issue is related to a stack overflow in the gena.cgi binary, which can be exploited by a remote attacker to elevate privileges and execute arbitrary commands. This is ...

PT-2023-7362 · Docker · Play With Docker

Name of the Vulnerable Software and Affected Versions: Play With Docker versions prior to 0.0.2 Description: The issue is related to an insecure CAP SYS ADMIN privileged mode in Play With Docker, which is associated with inadequate access control. This can be exploited by a remote attacker to...

PT-2023-3089 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to elevate their privileges using a specially crafted link. Recommendations: At the...

CVE-2023-33730

Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format...

The vulnerability of the microprogrammed software of the wireless VoIP router ICOM SR-7100VN, related to improper privilege assignment, allows a hacker to elevate their privileges.

The vulnerability of the microprogrammed software of the wireless VoIP router ICOM SR-7100VN is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of D-Link DIR-601 router’s microprogramming software, which involves transmitting critical information in plaintext, allows attackers to enhance their privileges.

The vulnerability of D-Link DIR-601 router’s microprogramming software is related to the transmission of critical information in plaintext. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the built-in software of the ARIS controller, related to access control errors, allows a intruder to increase their privileges within the system.

The vulnerability of the built-in software of the ARIS controller is related to access control errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges within the system...

PT-2023-5358 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to missing authorization in the OpenEMR software, which can be exploited by a remote attacker to elevate their privileges. Recommendations: For versions prior to 7.0.1, update ...

The vulnerability of the App-V software service for virtualizing and delivering Citrix Virtual Apps and Desktops (formerly XenApp and XenDesktop), operating systems Windows, allows a malicious individual to escalate their privileges and execute arbitrary commands.

The vulnerability of the App-V software service for virtualizing and delivering Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop on Windows operating systems is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiti...

mysql: Server: DML unspecified vulnerability (CPU Jan 2023)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

shopcms_lang 安全漏洞

shopcmslang is an open source online store system based on thinkphp5. shopcmslang A security vulnerability exists , the vulnerability stems from the existence of an insecure privilege vulnerability that allows remote attackers to elevate privileges through the coverid parameter...

The vulnerability of the Universal Print Server software for virtualizing and delivering Citrix Virtual Apps and Desktops (formerly XenApp and XenDesktop) on Windows operating systems allows a malicious individual to escalate their privileges and execute arbitrary commands.

The vulnerability of the Universal Print Server software, which is used for virtualizing and delivering Citrix Virtual Apps and Desktops formerly XenApp and XenDesktop applications to Windows operating systems, is related to deficiencies in access control. Exploiting this vulnerability allows an...

CVE-2023-29835

Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service permission function...

The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, related to authentication errors, allows a intruder to escalate their privileges.

The vulnerability of the multi-platform web solution for creating Scada systems is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Opcenter Quality production process management system, which stems from the use of a strictly encrypted cryptographic key, allows attackers to enhance their privileges.

The vulnerability of the Opcenter Quality production process management system is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...