PT-2024-17706

Name of the Vulnerable Software and Affected Versions ruifang-tech Rebuild version 3.8.5 Description A problematic issue was found in the Task Comment Attachment Upload component, affecting an unknown function. This issue leads to cross site scripting and can be exploited remotely. The exploit ha...

CVE-2024-12664: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

PT-2024-17705 · Ruifang Tech · Ruifang-Tech Rebuild

Name of the Vulnerable Software and Affected Versions: ruifang-tech Rebuild version 3.8.5 Description: A problematic issue has been found in the Project Task Comment Handler component, leading to cross-site scripting. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2024-12665: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

ManageEngine ServiceDesk Plus < 14.9 Build 14920

The version of ManageEngine ServiceDesk Plus installed on the remote host is prior to 14.9 Build 14920. It is, therefore, affected by a vulnerability as referenced in the service-deskCVE-2024-50053 advisory. - A stored cross-site scripting XSS vulnerability allowed authenticated technicians to...

security/keys: fix slab-out-of-bounds in key_task_permission

...

CVE-2024-49072

Windows Task Scheduler Elevation of Privilege Vulnerability...

CVE-2024-49072

Windows Task Scheduler Elevation of Privilege Vulnerability...

The vulnerability of the Windows Task Scheduler, a scheduling tool for operating systems, allows a malicious individual to exploit their elevated privileges.

The vulnerability of the Windows Task Scheduler, a task scheduling tool for Windows operating systems, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

CVE-2024-49072 Windows Task Scheduler Elevation of Privilege Vulnerability

...

CVE-2024-49072 Windows Task Scheduler Elevation of Privilege Vulnerability

...

CVE-2024-49072

Technical details about CVE-2024-49072 are not publicly available in the provided documents. Monitor for updates from official advisories; no covered exploit specifics, affected products, versions, or mitigations are provided here.

Windows Task Scheduler Elevation of Privilege Vulnerability

...

PT-2024-9324 · Microsoft · Windows Task Scheduler +1

Name of the Vulnerable Software and Affected Versions: Windows Task Scheduler affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Task Scheduler. It is associated with a buffer overflow in dynamic memory. Exploitation of this...

Microsoft Windows Task Scheduler 安全漏洞

Microsoft Windows Task Scheduler is an automation tool from Microsoft Corporation USA that allows users to automate scheduled tasks when specific conditions are met. A security vulnerability exists in Microsoft Windows Task Scheduler. An attacker could exploit the vulnerability to elevate...

CVE-2024-49072: Heap-based Buffer Overflow

Windows Task Scheduler Elevation of Privilege Vulnerability...

MAL-2024-11382 Malicious code in manoj-task-addons (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in manoj-task-addons (npm)

--- -= Per source details. Do not edit below this line.=-...

MITRE ATT&CK 2024 Results for Enterprise Security

Enterprise 2024 will incorporate multiple, smaller emulations for a more nuanced and targeted evaluation of defensive capabilities. We’re excited to offer two distinct adversary focus areas: Ransomware targeting Windows and Linux, and the Democratic People's Republic of Korea's targeting macOS...

OESA-2024-2513 ansible security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...