693 matches found
OWN-Defender
OWN-Defender — Windows 安全中心 COM 研究 OWN-Defender 是一个 Windows 安全研究项目，专注于理解 Windows 安全中心（WSC） 如何通过其 COM 接口表示和管理防病毒安全产品。 该项目最初是对 DefendNot 所展示行为的一项调查，但我没有将现有实现视为黑盒，而是将其作为独立逆向工程和验证的起点。 该项目的目标是理解完整的执行路径： COM ↓ CLSID / IID ↓ CoCreateInstance ↓ QueryInterface ↓ ATL 接口映射 ↓ vtable ↓ IWscAVStatus4 ↓ CWscIsv...
CVE-2026-65422
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...
CVE-2026-65422
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...
EUVD-2026-85917
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...
CVE-2026-65422
A flaw in the authorization mechanism for the Media Gateway API in Genetec Security Center may allow a user lacking playback privileges to generate video thumbnails . The vulnerability impacts confidentiality as indicated by the CVSS score. Remediation is available in Security Center version 5.14...
CVE-2026-65422
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...
CVE-2026-65422: Missing Authorization
A flaw in the authorization mechanism for Media Gateway API in Genetec Security Center may allow a user with no playback privileges to generate video thumbnails...
PT-2026-97833
Name of the Vulnerable Software and Affected Versions Genetec Security Center affected versions not specified Description A flaw in the authorization mechanism for the Media Gateway API allows a user without playback privileges to generate video thumbnails. Recommendations At the moment, there is...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: bnxt: An overflow occurs in bnxtgetnvramdirectory. The value of an arithmetic expression may be subject to overflow due to a failure to cast the operands to a larger data type before performing arithmetic operations. A macro is...
CVE-2026-77899
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...
EUVD-2026-73291
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...
CVE-2026-77899
CVE-2026-77899 is a use-after-free vulnerability in Windows Security Center that allows an authorized attacker to escalate privileges locally . The CVSS v3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting the need for low privileges and high attack complexity...
Windows Security Center Elevation of Privilege Vulnerability
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...
PT-2026-87976
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...
CVE-2026-77899: Use After Free
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...
[R1] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0: SC-202608.1
R1 Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0: SC-202608.1 Arnie Cabral Thu, 08/27/2026 - 13:05 Several vulnerabilities have been identified, reported to Tenable and resolved. Please see the full list of resolved issues below. Component| CVE ID |...
Tenable Security Center Report Charting Remote Code Execution
This Metasploit module demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated, non-administrative user to achieve code execution as the web service account tns through report generation. This module requires Metasploit: https://metasploit.com/download Current...
Tenable Security Center SCAP Audit File Command Injection
This is a Metasploit module that demonstrates how Tenable Security Center versions prior to 6.9.0 allow an authenticated user to achieve command execution as the web service account tns via the SCAP audit file upload flow. This module requires Metasploit: https://metasploit.com/download Current...
