1771 matches found
WIN-911 安全漏洞
Win-911 is a security software from the American company Win-911. It is used for industrial equipment alarm security. A security vulnerability exists in WIN-911 that stems from WIN-911's susceptibility to a privilege misconfiguration. An attacker could use this vulnerability to write files locall...
Win-911 安全漏洞
Win-911 is a security software from the American company Win-911. It is used for industrial equipment alarm security. A security vulnerability exists in WIN-911 2021 that stems from a misconfiguration of permissions in the product, which could allow an attacker to exploit the vulnerability to wri...
WIN-911 2021
1. EXECUTIVE SUMMARY CVSS v3 5.6 ATTENTION: Low attack complexity Vendor: WIN-911 Equipment: WIN-911 2021 Vulnerabilities: Incorrect Default Permissions 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to leverage the misconfigured privileges to the...
vim: use-after-free in win_linetabsize()
It was found that vim was vulnerable to use-after-free flaw in winlinetabsize. Sourcing a specially crafted file in vim could crash the vim process or possibly lead to other undefined behaviors...
virtio-win bug fix and enhancement update
An update is available for virtio-win. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virtio-win package provides paravirtualized network drivers for most...
PT-2021-6131 · Vim +11 · Vim +11
Name of the Vulnerable Software and Affected Versions: vim affected versions not specified Description: The issue is related to a Use After Free condition in the vim text editor, specifically concerning the win linetabsize function. This condition involves the use of memory after it has been free...
virtio-win bug fix and enhancement update
An update is available for virtio-win. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
Exploit for Code Injection in Gitlab
CVE-2021-22205 Fork based on mr-r3bot/Gitlab-CVE-2021-22205...
PT-2021-20571 · 3S Smart Software Solutions · Codesys V2 Runtime Toolkit +1
Name of the Vulnerable Software and Affected Versions: CODESYS V2 Runtime Toolkit 32 Bit full versions prior to V2.4.7.56 PLCWinNT versions prior to V2.4.7.56 Description: A crafted request may cause a read access to an uninitialized pointer, resulting in a denial-of-service condition...
CODESYS 安全漏洞
CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT versions prior to V2.4.7.56, which stems from a crafted invalid request without authentication in the affected software may...
PT-2021-5358
Name of the Vulnerable Software and Affected Versions Vim affected versions not specified Description The issue is related to a heap-based buffer overflow in the win redr status function of the Vim text editor. This can be exploited by a remote attacker using a specially crafted file, potentially...
CVE-2021-38629
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability...
[SECURITY] Fedora 34 Update: hivex-1.3.21-1.fc34
Hive files are the undocumented binary files that Windows uses to store the Windows Registry on disk. Hivex is a library that can read and write to these files. 'hivexsh' is a shell you can use to interactively navigate a hive binary file. 'hivexregedit' in perl-hivex lets you export and merge to...
Fedora: Security Advisory for hivex (FEDORA-2021-775b170f95)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
virtio-win bug fix and enhancement update
An update is available for virtio-win. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virtio-win package provides paravirtualized network drivers for most...
GLPI 9.4.5 - Remote Code Execution (RCE)
Exploit Title: GLPI 9.4.5 - Remote Code Execution RCE Exploit Author: Brian Peters Vendor Homepage: https://glpi-project.org Software Link: https://github.com/glpi-project/glpi/releases Version: | grep "CREATE TABLE" | grep -n wifinetworks Update the offsettable value with this number in the...
virtio-win bug fix and enhancement update
An update is available for virtio-win. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
spice-client-win bug fix and enhancement update
An update is available for spice-client-win. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
Microsoft Windows TokenMagic Privilege Escalation Exploit
This Metasploit module leverages a UAC bypass TokenMagic in order to spawn a process/conduct a DLL hijacking attack to gain SYSTEM-level privileges. Windows 7 through Windows 10 1803 are affected. This module requires Metasploit: https://metasploit.com/download Current source:...
Security Vulnerabilities fixed in Thunderbird 78.10.1 — Mozilla
The Maintenance Service granted SERVICESTART access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating if an attacker spammed the 'Stop' command; but also exposed atta...