26 matches found
appinfo-standalone
Ported UACME method 59 into standalone .C Youtube video demonstration: https://www.youtube.com/watch?v=UZdfh5RtR0&lc=UgxWnzgQ0x2KZBZIq6V4AaABAg...
Elevator
Description Elevator allows to bypass the UAC and spawn an elevated process with full administrator privileges. This is done by abusing the behaviour of the RPC server that implements the UAC feature, as demonstrated by James Forshaw in his article Calling Local Windows RPC Servers from .NET. The...
EUVD-2020-17744
Malware in sbrugna...
CVE-2024-32986
PWAsForFirefox is a tool to install, manage and use Progressive Web Apps PWAs in Mozilla Firefox. Due to improper sanitization of web app properties such as name, description, shortcuts, web apps were able to inject additional lines into XDG Desktop Entries on Linux and AppInfo.ini on...
CVE-2020-21838
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read2004sectionappinfo ../../src/decode.c:2842...
PWAsForFirefox 安全漏洞
PWAsForFirefox is a Filip Š Individual Developer's tool for installing, managing and using Progressive Web Applications PWAs in Mozilla Firefox. A security vulnerability exists in PWAsForFirefox versions prior to v2.12.0, which stems from improper cleanup of web application properties, where a we...
New Agenda Ransomware Variant, Written in Rust, Aiming at Critical Infrastructure
A Rust variant of a ransomware strain known as Agenda has been observed in the wild, making it the latest malware to adopt the cross-platform programming language after BlackCat, Hive, Luna, and RansomExx. Agenda, attributed to an operator named Qilin, is a ransomware-as-a-service RaaS group that...
CVE-2020-28865
An issue was discovered in PowerJob through 3.2.2, allows attackers to change arbitrary user passwords via the id parameter to /appinfo/save...
PT-2022-8908
Name of the Vulnerable Software and Affected Versions PowerJob versions 3.2.2 and earlier Description An issue allows attackers to change arbitrary user passwords via the id parameter to "/appinfo/save" API endpoint. Recommendations For PowerJob versions 3.2.2 and earlier, as a temporary...
PowerJob 安全漏洞
PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their own applications. a security vulnerability exists in PowerJob 3.2.2 and prior versions. An attacker could exploit the vulnerability to change an arbitrary user...
CVE-2021-39527
An issue was discovered in libredwg through v0.10.1.3751. appinfoprivate in decode.c has a heap-based buffer overflow...
PT-2021-22612
Name of the Vulnerable Software and Affected Versions: libredwg versions through 0.10.1.3751 Description: A heap-based buffer overflow issue was discovered in the appinfo private function, located in decode.c. This issue may be exploited, potentially leading to unintended consequences...
PT-2021-10683
Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the read 2004 section appinfo function, located in the decode.c file. This issue can be exploited via the read 2004 section appinfo function. Recommendations:...
GNU LibreDWG 缓冲区错误漏洞
LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the read2004sectionappinfo ... /... /src/decode.c:2842 to exploit the vulnerability and cause a heap buffer...
CVE-2020-25051
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via AppInfo. The Samsung ID is SVE-2020-17758 August 2020...
Design/Logic Flaw
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via AppInfo. The Samsung ID is SVE-2020-17758 August 2020...
CVE-2020-25051
CVE-2020-25051 affects Samsung mobile devices running Android P (9.0) and Q (10.0). The vulnerability permits bypassing Factory Reset Protection (FRP) via AppInfo, as described across multiple sources (NVD entry, Red Hat advisory, NCSC summary) with Samsung’s ID SVE-2020-17758. The exact affected...
CVE-2020-25051
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via AppInfo. The Samsung ID is SVE-2020-17758 August 2020...
PT-2020-15911
Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P9.0 and Q10.0 software Description An issue allows attackers to bypass Factory Reset Protection FRP via AppInfo. Recommendations For Samsung mobile devices with P9.0 software, update to a version that fixes this...
CVE-2020-25051: Undefined Security Weakness
An issue was discovered on Samsung mobile devices with P9.0 and Q10.0 software. Attackers can bypass Factory Reset Protection FRP via AppInfo. The Samsung ID is SVE-2020-17758 August 2020...