codecov 参数注入漏洞

codecov is a specialized code coverage solution open-sourced by codecov. A security vulnerability exists in codecov versions prior to 2.0.16, which stems from not cleaning up the gcov parameter before supplying it to the popen method...

CVE-2022-30202

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

CVE-2022-30224

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

CVE-2022-22037

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

CVE-2022-22038

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-22038

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-22038

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

Remote code execution

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

CVE-2022-22038 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2022-33689

Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder call...

CVE-2022-33689

Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder call...

CVE-2022-33689

Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder call...

Command injection

Command injection vulnerability in Druva inSync 6.9.0 for MacOS, allows attackers to execute arbitrary commands via crafted payload to the local HTTP server due to un-sanitized call to the python os.system library...

Improper access control

Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder call...

Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Advanced Local Procedure Call with privilege permission and access control issues. The following products and editions are affected:Windows 10...

PT-2022-3979 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Windows Advanced Local Procedure Call ALPC and is associated with inadequate access control. It allows an attacker to elevate their privileges. Recommendations: ...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Advanced Local Procedure Call with privilege permission and access control issues. The following products and editions are affected:Windows 10...

PT-2022-3713 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Windows Advanced Local Procedure Call ALPC and is associated with insufficient access control. It allows an attacker to elevate their privileges. Recommendations...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Advanced Local Procedure Call with privilege permission and access control issues. The following products and editions are affected:Windows 10...