45 matches found
CVE-2019-1315
Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...
MiniPlasma-Detection
MiniPlasma 检测 CVE-2020-17103 针对 MiniPlasma 的 Sigma 检测规则，这是一个利用 cldflt.sys 中竞争条件的 Windows 本地特权提升漏洞利用程序，通过劫持 SYSTEM 账户的 windir 环境变量，将 WER QueueReporting 计划任务重定向到执行攻击者控制的二进制程序（以 SYSTEM 身份运行）。 CVE-2020-17103 最初由 Google Project Zero 的 James Forshaw 于 2020 年报告，微软据称已修复。截至 2026 年 5 月，该漏洞在完全补丁的 Windows 11...
EUVD-2025-142512
Malicious code in butry-yust-wer npm...
EUVD-2025-142542
Malicious code in butry-mutyu-wer npm...
MAL-2025-10584 Malicious code in @zalastax/nolb-_wer (npm)
The package @zalastax/nolb-wer was found to contain malicious code...
CVE-2024-41514
A reflected cross-site scripting XSS vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter...
CVE-2024-41514
A reflected cross-site scripting XSS vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter...
CADClick 安全漏洞
CADClick is a software solution from CADClick, Inc. that creates interactive catalogs of 2D/3D CAD data for individual customer CAD catalogs. A security vulnerability exists in CADClick v1.11.0 and prior versions that stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability...
CVE-2024-41514: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter...
CVE-2024-41514
A reflected cross-site scripting XSS vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter...
CVE-2020-16909
CVE-2020-16909 describes a local privilege-escalation flaw in Windows Error Reporting (WER) that arises when WER handles and executes files. An attacker could exploit a crafted application to gain higher privileges and access sensitive information and system functionality. The NVD entry notes a s...
CVE-2020-16905
CVE-2020-16905 describes an elevation-of-privilege flaw in Windows Error Reporting (WER) where the vulnerability is triggered through WER’s handling/execution of files. Exploitation could give an attacker higher privileges and access to sensitive system functionality by running a crafted applicat...
CVE-2020-16905: Undefined Security Weakness
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...
Windows Error Reporting Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...
wer-war-hitler.de Cross Site Scripting vulnerability OBB-1332885
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Microsoft Windows Multiple Vulnerabilities (KB4561612)
This host is missing a critical security update according to Microsoft KB4561612 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1263
CVE-2020-1263 describes an information disclosure vulnerability in Windows Error Reporting (WER). The issue arises from how memory objects are handled by WER, allowing an attacker to potentially access information they should not have. The affected component is Windows Error Reporting, and the ro...
CVE-2020-1261
CVE-2020-1261 is an information-disclosure vulnerability in Windows Error Reporting (WER). The issue arises from how WER handles memory objects, allowing potential exposure of memory contents. The CVE is stated as distinct from CVE-2020-1263. Public sources in the provided documents describe the ...
KB4561616: Windows 10 Version 1607 and Windows Server 2016 June 2020 Security Update
The remote Windows host is missing security update 4561616. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execu...
CVE-2020-1082
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...