CVE-2019-12359

CVE-2019-12359 concerns ZZCMS (2019 version) with a SQL injection vulnerability in the admin module. Specifically, /admin/ztliuyan_sendmail.php is vulnerable via the id parameter when the attacker has admin authority, enabling manipulation of the database (as indicated by the vulnerability descri...

CVE-2019-12359

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyansendmail.php when the attacker has admin authority via the id parameter...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a hacker to bypass security restrictions and increase their privileges.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to bypass security restrictions and increase their privileges...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2022-30166

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

CVE-2022-30166

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

CVE-2022-30166

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

Privilege escalation

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability...

CVE-2022-30166

Technical details for CVE-2022-30166 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here; monitor for updates from official advisories.

CVE-2022-30166 Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

...

GHSA-V25C-8349-V2Q3 Incorrect Authorization in thinkcmf

thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user management group permissions. The use condition is that the background user management group authority is required...

Splunk 信任管理问题漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

Microsoft Windows Local Security Authority Subsystem Service 安全漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

CVE-2021-41453

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

USN-5473-1 ca-certificates update

The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.50 version of the Mozilla certificate authority bundle...

USN-5473-1: ca-certificates update

The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contained in the 2.50 version of the Mozilla certificate authority bundle...

CVE-2022-1550

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Microsoft Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Local Security Authority Subsystem Service in the Microsoft Windows operating system is related to insufficient input validation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Print Spooler Remote DLL Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'windowserror' require 'rubysmb' require 'rubysmb/error' class MetasploitModule 'Print Spooler Remote DLL Injection', 'Description' = %q The print spooler servic...

The vulnerability of the LSARPC interface method in the Windows LSA component of the Windows operating system allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the LSARPC interface method in the Windows LSA component of the Windows operating system is related to the possibility of bypassing the authentication mechanism. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack by redirecting NTLM...