Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)

Summary The SSID is not sanitized when before it is passed as a parameter to cmd.exe in the getWindowsIEEE8021x function. This means that malicious content in the SSID can be executed as OS commands. Details I have exploited this vulnerability in a Windows service using version 5.22.11 of the...

The vulnerability of the PrintWorkflowUserSvc service in Microsoft Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the PrintWorkflowUserSvc service in Microsoft Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2024-49104

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

CVE-2024-49099

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

CVE-2024-49099

Windows Wireless Wide Area Network Service WwanSvc Information Disclosure Vulnerability...

CVE-2024-49103 Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

...

CVE-2024-49103

CVE-2024-49103 affects Windows Wireless Wide Area Network Service (WwanSvc). It is an information disclosure vulnerability with CVSS 3.1 (AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N); attacker needs physical access (per the vector). The connected documents confirm the vulnerability description but do not...

CVE-2024-49098

CVE-2024-49098 affects Windows WWAN Service (WwanSvc). The vulnerability allows information disclosure in WWAN, with CVSS 3.1: AV Physical, AC Low, PR Low, UI None, S Unchanged, C High, I None, A None. Exploitation requires physical access and low complexity; attacker needs low privileges. Remedi...

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability

...

Microsoft Windows Wireless Wide Area Network Service 安全漏洞

Microsoft Windows Wireless Wide Area Network Service is a key component in Windows 10 and Windows 11 from Microsoft Corporation USA that facilitates wireless communication over cellular networks. A security vulnerability exists in Microsoft Windows Wireless Wide Area Network Service. An attacker...

PT-2024-9441 · Microsoft · Windows Printworkflowusersvc +1

Name of the Vulnerable Software and Affected Versions: Windows PrintWorkflowUserSvc affected versions not specified Description: The issue is related to the use of memory after it has been freed in the Windows PrintWorkflowUserSvc service, which can allow an attacker to elevate their privileges...

Malicious code in my-service-manager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 58c8e4c726cef11c6d7d60916210f532060a6ff7a98bb7fea5872eb10335dd5d While the package appears to be a manager for Windows service, the linked executable is an infostealer with capabilities like cookie stealing ang keylogger. Th...

CVE-2024-7245

Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the targ...

CVE-2024-7245

Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the targ...

CVE-2024-7245 Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Panda Security Dome VPN Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the targ...

CVE-2024-7245

CVE-2024-7245 affects Panda Security Dome VPN. The flaw is in the Hydra Sdk Windows Service, due to improper permissions on a folder created by the service. An attacker who can run low-privileged code locally can escalate to SYSTEM and execute arbitrary code. Public details indicate local vector ...

HASOMED Elefant 安全漏洞

HASOMED Elefant is an exercise software from the German company HASOMED. It specializes in meeting the needs of psychotherapists, child and adolescent psychotherapists, and medical psychotherapists. A security vulnerability exists in HASOMED Elefant, which arises from the fact that an attacker wi...

CVE-2024-10526 Rapid7 Velociraptor Local Privilege Escalation In Windows Velociraptor Service

Rapid7 Velociraptor MSI Installer versions below 0.73.3 suffer from a vulnerability whereby it creates the installation directory with WRITEDACL permission to the BUILTIN\Users group. This allows local users who are not administrators to grant themselves the Full Control permission on...

Cato Networks Windows SDP Client 代码问题漏洞

Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A code issue vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.34, which stems from the ability to implement a local elevation of privilege via an openssl configuration fi...

PT-2024-38205 · Panda Security · Panda Security Dome

Name of the Vulnerable Software and Affected Versions: Panda Security Dome affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system...