PT-2024-17709 · Velocidex · Velocidex Winpmem

Name of the Vulnerable Software and Affected Versions: Velocidex WinPmem versions below 4.1 Description: The issue allows a user space program to trick the driver into writing a 0 into any chosen memory location by using an IO Control. In conjunction with information leakage from the WinPmem...

GO-2023-1527 Velociraptor vulnerable to Missing Authorization in www.velocidex.com/golang/velociraptor

Velociraptor vulnerable to Missing Authorization in www.velocidex.com/golang/velociraptor...

Cross-site Scripting (XSS)

github.com/velocidex/velociraptor is vulnerable to Cross-site Scripting. This vulnerability exists because it does not properly validate error paths, allowing an attacker to inject and execute malicious JavaScript in the browser...

Denial Of Service (DoS)

github.com/velocidex/velociraptor is vulnerable to Denial of Service DoS attacks. Due of poor validation in the PE and OLE parsers, an attacker is able to cause the application to crash by processing a deliberately malformed file...

Velocidex Velociraptor 安全漏洞

Velocidex Velociraptor is a tool from Velocidex Australia that uses Velociraptor Query Language VQL queries to gather host-based status information. A security vulnerability exists in Velocidex Velociraptor that stems from the fact that Rapid7 Velociraptor allows the creation of users with...

Velocidex Velociraptor 路径遍历漏洞

Velocidex Velociraptor is a tool from Velocidex Australia that collects host-based state information using Velociraptor Query Language VQL queries. A security vulnerability exists in Velocidex Velociraptor that stems from the Rapid7 Velociraptor not properly cleaning up the client ID parameter of...

Cross-Site Scripting (XSS)

github.com/velocidex/velociraptor is vulnerable to cross-site scripting. The vulnerability exists in the Completer function in syntax.js due to improper sanitization in the description field which allows an attacker to inject and execute malicious javascript...