2590 matches found
Exploit for Missing Authorization in Themehunk Hunk_Companion
CVE-2024-9707 Hunk Companion = 1.8.4 - Missing Authorizati...
Exploit for CVE-2023-30486
CVE-2023-30486 Square = 2.0.0 - Missing Authorization via...
Fake Disney+ activation page redirects to pornographic scam
A common way to activate digital subscriptions such as Netflix, Prime or Disney+ on a new TV is to visit a website and enter the code seen on your screen. It's much easier than having to authenticate using a remote and typing a username and password. Scammers are creating fake activation pages th...
PUB-A-335031446
there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
systemd bug fix update
An update is available for systemd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The systemd packages contain systemd, a system and service manager for Linux,...
CVE-2024-6769 Medium to High Integrity Privilege Escalation in Microsoft Windows
A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integri...
CVE-2024-6769 Medium to High Integrity Privilege Escalation in Microsoft Windows
A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated attacker to elevate from a medium integrity process to a high integri...
CVE-2024-6769
CVE-2024-6769 describes a Windows DLL hijacking and Activation Context Cache poisoning chain that enables a MEDIUM integrity process to escalate to HIGH integrity (Administrator) without a UAC prompt. The exploit combines drive remapping (ROOT drive) with activation-context manipulation via CSRSS...
CGA-VGH7-PWPF-J462
Bulletin has no description...
CGA-PM8F-H5VM-FP8Q
Bulletin has no description...
CGA-MXXW-VQ3V-9FMM
Bulletin has no description...
CGA-JH6Q-P48R-6G4M
Bulletin has no description...
CGA-JG5G-8XX5-J444
Bulletin has no description...
CGA-J5V4-WCP4-7FJR
Bulletin has no description...
CGA-H67R-5FP9-8PGF
Bulletin has no description...
CGA-GCWJ-6HMP-3FV3
Bulletin has no description...
CGA-FMH7-XWQM-XF4P
Bulletin has no description...
CGA-CP8P-W2M9-JWGG
Bulletin has no description...
CGA-GVH6-P87F-4768
Bulletin has no description...
PT-2024-9155
Name of the Vulnerable Software and Affected Versions: virtualenv versions prior to 20.26.6 Description: The issue is related to command injection through the activation scripts for a virtual environment in virtualenv. It is caused by the incorrect quoting of magic template strings when replacing...