18047 matches found
PT-2023-14614
Name of the Vulnerable Software and Affected Versions Sewio’s Real-Time Location System RTLS Studio versions 2.0.0 through 2.6.2 Description The issue allows an attacker to execute arbitrary backup operations and cause a denial-of-service condition by exploiting a cross-site request forgery...
Sewio Real-Time Location System (RTLS) Studio 跨站脚本漏洞
Sewio Real-Time Location System RTLS Studio is a real-time location system from Sewio, Inc. A cross-site scripting vulnerability exists in Sewio's Real-Time Location System RTLS Studio versions 2.0.0 through 2.6.2, which stems from a backup service that is vulnerable to cross-site scripting. An...
GSD-2023-1000430 ext4: fix corrupt backup group descriptors after online resize
ext4: fix corrupt backup group descriptors after online resize This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...
GSD-2023-1000429 drm/i915/ttm: consider CCS for backup objects
drm/i915/ttm: consider CCS for backup objects This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...
PT-2023-33507 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.0.8 through v6.0.17 Description: The issue is related to corrupt backup group descriptors after an online resize in the ext4 filesystem. The actual impact and attack plausibility have not yet been proven...
WordPress MainWP BlogVault Backup Extension Plugin <= 1.3 is vulnerable to Broken Access Control
Software MainWP BlogVault Backup Extension Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-23741 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID a23fba51ad99 Credits Dave Jong...
A Secure User Authentication Method – Planning is More Important than Ever
When considering authentication providers, many organizations consider the ease of configuration, ubiquity of usage, and technical stability. Organizations cannot always be judged on those metrics alone. There is an increasing need to evaluate company ownership, policies and the stability, or...
Security Bulletin: A vulnerability in Open JDK affecting Rational Functional Tester
Summary A vulnerability in Open JDK Version 8, OpenJ9 used by Rational Functional Tester RFT. RFT has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-3676 DESCRIPTION: Eclipse Openj9 could allow a remote attacker to bypass security restrictions, caused by improper runtime type...
PT-2023-15526 · Sewio · Sewio'S Real-Time Location System (Rtls) Studio
Name of the Vulnerable Software and Affected Versions: Sewio’s Real-Time Location System RTLS Studio versions 2.0.0 through 2.6.2 Description: The issue is related to improper validation of the input module name to the backup services of the software. This could allow a remote attacker to access...
Microsoft Patch Tuesday January 2023: ALPC EoP, Win Backup EoP, LocalPotato, Exchange, Remote RCEs
Hello everyone! This episode will be about Microsoft Patch Tuesday for January 2023, including vulnerabilities that were added between December and January Patch Tuesdays. Alternative video link for Russia: As usual, I use my open source Vulristics project to analyse and prioritize vulnerabilitie...
WordPress Slider Revolution 4.9.2 Directory Traversal
==================================================================================================================================== | Title : WordPress - Slider Revolution 4.9.2 Directory Traversal Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...
Global Education And Technoworld 4.1 Backup Disclosure
==================================================================================================================================== | Title : GLOBAL EDUCATION & TECHNOWORLD Version 4.1 unauthorized backup download Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.10Pro /...
Microsoft Windows Backup Service Elevation of Privilege Vulnerability (CNVD-2023-02699)
Microsoft Windows Backup Service is an elevation of privilege vulnerability that can be exploited by attackers to elevate privileges...
Windows Backup Service Privilege Escalation
The vulnerability of the Windows Backup Service in operating systems relates to errors in privilege management. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...
CVE-2023-21752
Windows Backup Service Elevation of Privilege Vulnerability...
CVE-2023-21752
Windows Backup Service Elevation of Privilege Vulnerability...
CVE-2023-21752
Windows Backup Service Elevation of Privilege Vulnerability...
Privilege escalation
Windows Backup Service Elevation of Privilege Vulnerability...
