CVE-2021-42851

A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account...

CVE-2021-42851

A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account...

CVE-2021-44750

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands...

CVE-2021-44750: Undefined Security Weakness

An arbitrary code execution vulnerability was found in the F-Secure Support Tool. A standard user can craft a special configuration file, which when run by administrator can execute any commands...

CVE-2022-22528

SAP Adaptive Server Enterprise ASE - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The...

CVE-2022-22528

SAP Adaptive Server Enterprise ASE - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The...

Privilege escalation

SAP Adaptive Server Enterprise ASE - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The...

PT-2022-15497 · Sap +1 · Sap Adaptive Server Enterprise +1

Name of the Vulnerable Software and Affected Versions: SAP Adaptive Server Enterprise ASE version 16.0 Description: The issue arises during the installation of SAP Adaptive Server Enterprise ASE on the Windows platform, where an entry is made in the system PATH environment variable. Under certain...

CVE-2021-38617: Undefined Security Weakness

In Eigen NLP 3.10.1, a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privilege escalation...

Exploit for CVE-2021-36934

Invoke-HiveNightmare PowerShell-based PoC for CVE-2021-36934,...

HookDump - Security Product Hook Detection

EDR function hook dumping Please refer to the Zeroperil blog post for more information https://zeroperil.co.uk/hookdump/ Building source In order to build this you will need Visual Studio 2019 community edition is fine and CMake. The batch file Configure.bat will create two build directories with...

CVE-2020-15816: Exposure of Resource to Wrong Sphere

In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the application's process through library injection by using DYLD environment variables...

PT-2018-18268

Name of the Vulnerable Software and Affected Versions: Schneider Electric U.motion Builder versions prior to 1.3.4 Description: The issue exists within the processing of editscript.php, allowing a directory traversal vulnerability. This enables a caller with standard user privileges to write...

CVE-2018-7771: Improper Limitation of a Pathname to a Restricted Directory

The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal vulnerability allows a caller with standard user privileges to write arbitrary php files anywhere in the web service directory tree...

macOS 10.13 Authentication Bypass Remote Check (CVE-2017-13872)

The remote host is affected by an authentication bypass vulnerability. A local attacker or a remote attacker with credentials for a standard user account has the ability to blank out the root account password. This can allow an authenticated attacker to escalate privileges to root and execute...

PT-2017-12725

Name of the Vulnerable Software and Affected Versions Kanboard versions prior to 1.0.46 Description The issue allows an authenticated standard user to reset the password of other users, including the admin, by altering form data. Recommendations For versions prior to 1.0.46, update to version...

【Bug fix】Report: 2 0 1 4 years Microsoft 9 7% of the vulnerabilities with administrator permissions for-vulnerability warning-the black bar safety net

This week, the British company called Avecto, a security company released a latest security Report, 2 0 1 4 year Microsoft released and repair of the 2 4 0 one security breach, more than 9 7 per cent with administrator privileges is the use of related. At the same time, the company to the user of...

CruiseWorks and Minna De Office vulnerable in access restrictions

Overview CruiseWorks and Minna De Office are groupware. They contain a vulnerability that the user's access restriction is not properly set. Impact An user with a standard privilege who logs into CruiseWorks or Minna De Office could possibly change the system configurations or information...