10328 matches found
EzViz Studio 2.2.0 DLL Hijacking
PoC: DLL Hijacking via EzViz Studio Reported by EAFZ from Pythongoras Author: EAFZ aka myantti3m CVE: CVE-2023-41613. Test Environment: OS: Windows 11 Pro 64 bit10.0, Build 2261 EzViz Studio version: 2.2.0 Technical Description 1. Technical Description EzvizStudio.exe searches for a DLL called...
Microsoft .NET Framework Multiple Vulnerabilities (KB5031989)
This host is missing an important security update according to Microsoft KB5031989 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft .NET Framework Multiple Vulnerabilities (KB5032339)
This host is missing an important security update according to Microsoft KB5032339 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft .NET Framework Multiple Vulnerabilities (KB5032338)
This host is missing an important security update according to Microsoft KB5032338 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Ubuntu 22.04 LTS / 23.04 / 23.10 : .NET vulnerabilities (USN-6480-1)
The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6480-1 advisory. Barry Dorrans discovered that .NET did not properly implement certain security features for Blazor server forms. An attacker could possib...
CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...
Privilege escalation
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...
GHSA-C3HF-8VGX-72RH Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 7.0 and .NET 8.0 RC2. This advisory also provides guidance on what developers can do...
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 7.0 and .NET 8.0 RC2. This advisory also provides guidance on what developers can do...
CVE-2023-36049
CVE-2023-36049 affects Microsoft .NET, .NET Framework and Visual Studio, enabling a remote authenticated attacker to gain elevated privileges by injecting commands via the FTP server (elevation of privilege). Public references in connected advisories confirm the vulnerability and provide distribu...
CVE-2023-36049 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
...
CVE-2023-36049
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability...
CVE-2023-32278
Path transversal in some IntelR NUC Uniwill Service Driver for IntelR NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver installation software before version 1.0.1.7 for IntelR NUC Software Studio may allow an authenticated user to potentially enable escalation of privilege via loca...
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Introduction This write-up describes a vulnerability found in Label Studio, a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.9.2post0 and was tested on version 1.8.2. Overview In all current versions of Label Studio, the application allow...
GHSA-6HJJ-GQ77-J4QW Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Introduction This write-up describes a vulnerability found in Label Studio, a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.9.2post0 and was tested on version 1.8.2. Overview In all current versions of Label Studio, the application allow...
CVE-2023-36042
Visual Studio Denial of Service Vulnerability...
CVE-2023-36042
Visual Studio Denial of Service Vulnerability...
CVE-2023-36018
Visual Studio Code Jupyter Extension Spoofing Vulnerability...