Malicious code in aws-cloud_search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-4839

A Cross-Site Request Forgery CSRF vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms-webui, versions 9.6 to the latest. The affected functions include Elastic search Service under construction, XTTS service, Petals service, vLLM service, and Motion Ctrl service,...

CVE-2024-4839 CSRF in Servers Configurations in parisneo/lollms-webui

A Cross-Site Request Forgery CSRF vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms-webui, versions 9.6 to the latest. The affected functions include Elastic search Service under construction, XTTS service, Petals service, vLLM service, and Motion Ctrl service,...

CVE-2024-4839

CVE-2024-4839 affects parisneo/lollms-webui, versions 9.6 through the latest. The vulnerability is a CSRF flaw in the 'Servers Configurations' function that guards several components (Elastic search Service, XTTS service, Petals service, vLLM service, Motion Ctrl service). The root cause is lack ...

CVE-2024-4839 CSRF in Servers Configurations in parisneo/lollms-webui

A Cross-Site Request Forgery CSRF vulnerability exists in the 'Servers Configurations' function of the parisneo/lollms-webui, versions 9.6 to the latest. The affected functions include Elastic search Service under construction, XTTS service, Petals service, vLLM service, and Motion Ctrl service,...

LoLLMs Cross-Site Request Forgery Vulnerability

LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A cross-site request forgery vulnerability exists in LoLLMs version 9.6 and prior versions, which stems from a lack of cross-site request forgery protection in the Elastic Search Service, XTTS...

The vulnerability of the Windows Search service in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Search service in Windows operating systems is related to the incorrect handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2024-30033

Windows Search Service Elevation of Privilege Vulnerability...

CVE-2024-30033

Windows Search Service Elevation of Privilege Vulnerability...

CVE-2024-30033

CVE-2024-30033 affects the Microsoft Windows operating system from the Windows Search Component area. The vulnerability is described as an Elevation of Privilege in the Windows Search Service, enabling a local attacker to obtain higher privileges on the system. The CVE is categorized with a CVSS ...

CVE-2024-30033 Windows Search Service Elevation of Privilege Vulnerability

...

CVE-2024-30033 Windows Search Service Elevation of Privilege Vulnerability

...

Windows Search Service Elevation of Privilege Vulnerability

...

Microsoft Windows Search Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows Search...

PT-2024-3706 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Search Service, which is caused by incorrect handling of symbolic links before accessing a file. This...

KLA67433 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote cod...

The vulnerability of the Windows operating system’s Search service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows operating system’s Search service is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2023-36394

Windows Search Service Elevation of Privilege Vulnerability...

CVE-2023-36394

Windows Search Service Elevation of Privilege Vulnerability...

CVE-2023-36394

Technical details about CVE-2023-36394 (Windows Search Service elevation of privilege) are not provided in the supplied documents. Monitor for updates; no vendor, impact, or remediation details are disclosed here.