CVE-2022-28005

An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abuse improperly secured access to arbitrary files on the server via /Electron/download directory traversal in conjunction with a path component that uses...

CVE-2022-27636

CVE-2022-27636 is a logging vulnerability in F5 BIG-IP APM Edge Client for Windows where sensitive APM session information can be written to logs when VPN is launched. The connected F5 advisory K57110035 confirms affected products and provides fixed versions: BIG-IP APM (16.1.2.2; 16.x), (15.1.5....

PT-2022-3141 · Microsoft · Windows Encrypting File System +1

Name of the Vulnerable Software and Affected Versions: Windows Encrypting File System EFS affected versions not specified Description: The issue is related to insufficient input validation in the Windows Encrypting File System EFS, which can be exploited by a remote attacker to execute arbitrary...

Qt allows for privilege escalation due to hard-coding of qt_prfxpath value

Overview Prior to version 5.14, Qt hard-codes the qtprfxpath value to a fixed value, which may lead to privilege escalation vulnerabilities in Windows software that uses Qt. Description Prior to version 5.14, Qt hard-codes the qtprfxpath value to a value that reflects the path where Qt exists on...

Trojan-Downloader.Win32.Agent Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/fb3ac3c9d808de7f4b5ede68715f658f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Downloader.Win32.Agent Vulnerability: Insecure Permissions Description: The malware writes a ...

Windows SMB Disclosure

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to information disclosure. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Windows System Launcher Privilege Escalation

The vulnerability of the Windows System Launcher component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2022-21866

Windows System Launcher Elevation of Privilege Vulnerability...

CVE-2022-21866

Windows System Launcher Elevation of Privilege Vulnerability...

CVE-2022-21866

Windows System Launcher Elevation of Privilege Vulnerability...

CVE-2022-21848

Windows Internet Key Exchange IKE Extension Denial of Service Vulnerability...

Privilege escalation

Windows System Launcher Elevation of Privilege Vulnerability...

Microsoft Windows Permission Licensing and Access Control Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows System Launcher with privilege license and access control issues. The following products and editions are affected: Windows Server 2022,Windows...

PT-2022-1501 · Microsoft · Windows System Launcher +1

Name of the Vulnerable Software and Affected Versions: Windows System Launcher affected versions not specified Description: The issue is related to insecure privilege management in the Windows System Launcher component of the Windows operating system. Exploitation of this issue may allow an...

CVE-2022-21866: Undefined Security Weakness

Windows System Launcher Elevation of Privilege Vulnerability...

CVE-2021-43217

Windows Encrypting File System EFS Remote Code Execution Vulnerability...

PT-2021-6301 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the NTFS file system of the Windows operating system. It allows an attacker to potentially elevate their privileges, affecting the...

CVE-2021-31850

A denial-of-service vulnerability in Database Security DBS prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files i...

CVE-2021-31850 Denial of Service in Database Security on Windows

A denial-of-service vulnerability in Database Security DBS prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files i...

CVE-2021-31850: Files or Directories Accessible to External Parties

A denial-of-service vulnerability in Database Security DBS prior to 4.8.4 allows a remote authenticated administrator to trigger a denial-of-service attack against the DBS server. The configuration of Archiving through the User interface incorrectly allowed the creation of directories and files i...