CVE-2024-55968

CVE-2024-55968 针对CVE-2024-55968的本地权限提升漏洞利用POC 漏洞描述 macOS DTEX Event Forwarder代理中的com.dtexsystems.helper服务负责处理特权操作，但在XPC进程间通信（IPC）过程中未能实现关键的客户端验证。具体而言，该服务未验证任何尝试建立连接的客户端的代码要求、权限、安全标志或版本。这种缺乏正确逻辑验证的问题使恶意攻击者能够通过未授权的客户端连接利用服务的方法，并将权限提升至root。 受影响版本 DEC-M（DTEX Forwarder）6.1.1 受影响组件 DEC-M...

CVE-2024-55968: Privilege Defined With Unsafe Actions

An issue was discovered in DTEX DEC-M DTEX Forwarder 6.1.1. The com.dtexsystems.helper service, responsible for handling privileged operations within the macOS DTEX Event Forwarder agent, fails to implement critical client validation during XPC interprocess communication IPC. Specifically, the...

PT-2024-36621 · Dtex · Dtex Dec-M

Name of the Vulnerable Software and Affected Versions: DTEX DEC-M DTEX Forwarder version 6.1.1 Description: An issue was discovered in the com.dtexsystems.helper service, which handles privileged operations within the macOS DTEX Event Forwarder agent. The service fails to implement critical clien...

CVE-2015-7766

CVE-2015-7766 affects Zoho ManageEngine OpManager 11.6, 11.5 and earlier. The issue in PGSQL:SubmitQuery.do lets remote admins bypass SQL query restrictions by inserting a comment into requests to api/json/admin/SubmitQuery (e.g., "INSERT/**/INTO"). Public references describe this as a SQL query ...

PT-2015-7596

Name of the Vulnerable Software and Affected Versions ManageEngine OpManager versions 11.6, 11.5, and earlier Description The issue allows remote administrators to bypass SQL query restrictions. This can be achieved by including a comment in the query to the "api/json/admin/SubmitQuery" API...

CVE-2015-7766: Undefined Security Weakness

PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to api/json/admin/SubmitQuery, as demonstrated by "INSERT//INTO."...