Foreman 安全漏洞

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A security vulnerability exists in Foreman that arises from improper authorization handling...

Foreman 安全漏洞

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides service provisioning, configuration management, and status reporting. Foreman has a security vulnerability that can be exploited by an attacker to emulate foreman-proxy...

File upload vulnerability in health collection reporting system (CNVD-2021-24510)

Health collection and reporting system using PHP + mysql development, open source code, to facilitate secondary development. Health Collection and Reporting System has a file upload vulnerability that can be exploited by attackers to gain control of the server...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

/user/sessions endpoint allows detecting valid accounts

This Security Advisory is about a vulnerability in eZ Platform v1.13, v2.5, and v3.2, and in Ibexa DXP and Ibexa Open Source v3.3. The /user/sessions endpoint can let an attacker detect if a given username or email refers to a valid account. This can be detected through differences in the respons...

GHSA-7VWG-39H8-8QP8 /user/sessions endpoint allows detecting valid accounts

This Security Advisory is about a vulnerability in eZ Platform v1.13, v2.5, and v3.2, and in Ibexa DXP and Ibexa Open Source v3.3. The /user/sessions endpoint can let an attacker detect if a given username or email refers to a valid account. This can be detected through differences in the respons...

CVE-2021-24090

Windows Error Reporting Elevation of Privilege Vulnerability...

CVE-2021-24090

Windows Error Reporting Elevation of Privilege Vulnerability...

Privilege escalation

Windows Error Reporting Elevation of Privilege Vulnerability...

CVE-2021-24090

Windows Error Reporting Elevation of Privilege Vulnerability...

CVE-2021-24090 Windows Error Reporting Elevation of Privilege Vulnerability

...

CVE-2021-24090

CVE-2021-24090 is a Windows Elevation of Privilege affecting Windows Error Reporting (WER). The connected records identify the affected component as Windows Error Reporting and classify the vulnerability as privilege escalation with impact on confidentiality, integrity, and availability (per CVSS...

CVE-2021-26411

creationtimestamp| type| source ---|---|--- 2021-03-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=560 2021-03-10 15:20:45+00:00| exploited| https://t.me/truesecator/1504 2021-03-11 19:00:31+00:00| seen| https://t.me/cibsecurity/24780 2021-03-15 04:50:46+00:00|...

Microsoft Windows Error Reporting elevation of privilege vulnerability (CNVD-2023-02195)

Microsoft Windows is a set of operating systems used for personal devices.Microsoft Windows Server is a set of server operating systems.Windows Error Reporting WER is one of the error reporting components. An elevation of privilege vulnerability exists in Microsoft Windows Error Reporting, which...

Description of the security update for Power BI Report Server (October 2020): March 9, 2021 (KB5001285)

Description of the security update for Power BI Report Server October 2020: March 9, 2021 KB5001285 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploits this vulnerability cou...

Description of the security update for Power BI Report Server (May 2020): March 9, 2021 (KB5001284)

Description of the security update for Power BI Report Server May 2020: March 9, 2021 KB5001284 Summary A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services if it incorrectly handles page requests. An attacker who successfully exploits this vulnerability could...

Windows Error Reporting Elevation of Privilege Vulnerability

...

PT-2021-2284 · Microsoft · Windows Error Reporting +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Error Reporting service of the Windows operating system. This can allow an attacker to elevate their...

Microsoft Windows Error Reporting 安全漏洞

Microsoft Windows is a set of operating systems used for personal devices.Microsoft Windows Server is a set of server operating systems.Windows Error Reporting WER is one of the error reporting components. An elevation of privilege vulnerability exists in Microsoft Windows Error Reporting, which...

U.S. General Services Administration: IDOR at training.smartpay.gsa.gov/reports/quizzes-taken-by-user

Hey, I found an IDOR that allow anyone view other user result by changing USERID parameter. /reports/quizzes-taken-by-user.csv/USERID Step to Produce: Go to the Section quizzes-taken-by-user as Shown in the Screenshot attached. Step 2: Click on Download CSV. Step 3 Intercept the Request using the...