38 matches found
CVE-2025-3047 Path Traversal in AWS SAM CLI allows file copy to build container
When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...
CVE-2025-3047: UNIX Symbolic Link (Symlink) Following
When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...
CVE-2025-3048: UNIX Symbolic Link (Symlink) Following
After completing a build with AWS Serverless Application Model Command Line Interface SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outsid...
The vulnerability of the Windows Application Model Core API of the operating system allows attackers to enhance their privileges.
The vulnerability of the Windows Application Model Core API component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2022-21862
Windows Application Model Core API Elevation of Privilege Vulnerability...
CVE-2022-21862
Windows Application Model Core API Elevation of Privilege Vulnerability...
CVE-2022-21862
Windows Application Model Core API Elevation of Privilege Vulnerability...
Privilege escalation
Windows Application Model Core API Elevation of Privilege Vulnerability...
CVE-2022-21862 Windows Application Model Core API Elevation of Privilege Vulnerability
...
Windows Application Model Core API Elevation of Privilege Vulnerability
...
PT-2022-1516 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Application Model Core API, which can be exploited to elevate privileges. This could allow an attacker to affect the...
CVE-2022-21862: Undefined Security Weakness
Windows Application Model Core API Elevation of Privilege Vulnerability...
Microsoft Windows 权限许可和访问控制问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Application Model with privilege permission and access control issues. The following products and versions are affected:Windows 10 for x64-base...
Missing permission checks in aws-credentials allows enumerating credentials IDs
aws-credentials 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints. This allows attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins if any of the following plugins are installed: Amazon Elastic Container...
[SECURITY] Fedora 32 Update: eclipse-gef-3.11.0-13.fc32
The Graphical Editing Framework GEF allows developers to create a rich graphical editor from an existing application model. GEF is completely application neutral and provides the groundwork to build almost any application, including but not limited to: activity diagrams, GUI builders, class diagr...
AlertResponder - Automatic Security Alert Response Framework By AWS Serverless Application Model
AlertResponder is a serverless framework for automatic response of security alert. Overview AlertResponder receives an alert that is event of interest from security view point and responses the alert automatically. AlertResponder has 3 parts of automatic response. 1. Inspector investigates entiti...
China is the birth place for most of malicious Android apps
China is the birth place for most of malicious Android apps Mobile malware is rising, and there have been explosions in the world of viruses and Trojans. Virus makers are now targeting mobile platforms- thanks to their growing popularity. If we take the statistics from last 6 months, the chances ...
