2161 matches found
Privilege escalation
Windows User Profile Service Elevation of Privilege Vulnerability...
Denial of service
User Profile Service Denial of Service Vulnerability...
CVE-2021-26886
User Profile Service Denial of Service Vulnerability...
CVE-2021-26886
CVE-2021-26886 is a Microsoft Windows User Profile Service Denial of Service vulnerability affecting the User Profile Service component. CVSS v3.1 base score 6.1 (Medium): attack vector LOCAL, privileges required LOW, user interaction NONE, with high impact on availability and low impact on integ...
CVE-2021-26886 User Profile Service Denial of Service Vulnerability
...
CVE-2021-26873
Technical details about CVE-2021-26873 (affected product/version, root cause, exploitability, fixes) are not provided in the connected documents. Monitor for updates from official advisories.
CVE-2021-26873 Windows User Profile Service Elevation of Privilege Vulnerability
...
MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting Vulnerability
Exploit Title: MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=1220 Version: 1.8.22 Tested on: Windows 10 CVE: CVE-2021-28115 1. Description: This plugin adds a feedback...
MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting
Exploit Title: MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting Date: 1/30/2021 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=1220 Version: 1.8.22 Tested on: Windows 10 CVE: CVE-2021-28115 1. Description: This plugin...
User Profile Service Denial of Service Vulnerability
...
Windows User Profile Service Elevation of Privilege Vulnerability
...
PT-2021-2334 · Microsoft · Windows User Profile Service +1
Name of the Vulnerable Software and Affected Versions: Windows User Profile Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows User Profile Service. Exploitation of this issue can allow an attacker to elevate their privileges...
Microsoft Windows User Profile Service 安全漏洞
Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A security vulnerability exists in Microsoft Windows User Profile Service. The following products and...
Microsoft Windows User Profile Service 后置链接漏洞
Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A backlink vulnerability exists in Microsoft Windows User Profile Service. The following products and...
User Profile Picture < 2.5.0 - Sensitive Information Disclosure
The REST API endpoint getusers in the plugin returned more information than was required for its functionality to users with the uploadfiles capability. This included password hashes, hashed user activation keys, usernames, emails, and other less sensitive information. PoC Usage: php poc.php auth...
WordPress User Profile Picture plugin <= 2.4.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability found by WordFence in WordPress User Profile Picture plugin versions = 2.4.0. Solution Update the WordPress User Profile Picture plugin to the latest available version at least 2.5.0...
Daily Expense Tracker System Cross-Site Scripting Vulnerability (CNVD-2025-31006)
Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a cross-site scripting vulnerability that originates from the user-profile.php Full Name parameter. No details of the vulnerability are available at this time...
CVE-2021-26303
PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field...
