Denial of service

Remote Procedure Call Runtime Denial of Service Vulnerability...

EXNESS: Double forward slash breaks server-side restrictions & allows access to prohibited services from a partner account

A vulnerability was discovered where making an API call with double/multiple forward slashes broke server-side restrictions imposed upon a partner account, allowing unrestricted access to the autorebates facility, which was otherwise unavailable to the partner account...

CVE-2022-4422

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0...

CVE-2022-4422

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0...

Sql injection

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0...

Remote Procedure Call Runtime Denial of Service Vulnerability

...

PT-2023-1372 · Unknown · Asp Bootloader

Name of the Vulnerable Software and Affected Versions: ASP Bootloader affected versions not specified Description: The issue is related to insufficient syscall input validation in the ASP Bootloader, which may allow a privileged attacker to read memory outside the bounds of a mapped register,...

PT-2023-14436 · Bulutses Information Technologies · Bulutses Call Center System

Name of the Vulnerable Software and Affected Versions: Bulutses Information Technologies Call Center System versions prior to 3.0 Description: The issue is related to an unauthenticated Sql Injection vulnerability. This vulnerability has been fixed in version 3.0. Recommendations: For versions...

CVE-2022-4422

The CVE-2022-4422 issue affects Bulutses Information Technologies’ Call Center System prior to version 3.0. It is an unauthenticated SQL Injection vulnerability in the application (component/feature not explicitly named in the documents) that could allow arbitrary SQL execution. The vulnerability...

PT-2023-1412 · Amd · Amd Secure Processor

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor ASP affected versions not specified Description: The issue is related to insufficient input validation in the SYS KEY DERIVE system call, which can be exploited by an attacker to corrupt AMD Secure Processor ASP OS memory...

PT-2023-1014

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An elevation of privilege issue exists in the Windows kernel Advanced Local Procedure Call ALPC subsystem. The flaw is caused by a use-after-free condition where an ALPC message...

CVE-2023-21525 Remote Procedure Call Runtime Denial of Service Vulnerability

...

CVE-2022-4422 SQLi in Bulutdesk Callcenter

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0...

PT-2023-18280 · Unknown +1 · Remote Procedure Call (Rpc) Runtime +1

Name of the Vulnerable Software and Affected Versions: Remote Procedure Call Runtime affected versions not specified Description: A denial-of-service issue allows attackers to affect the system. The estimated number of potentially affected devices worldwide is not available. There is no informati...

PT-2023-12585 · Amd · Amd Secure Processor

Name of the Vulnerable Software and Affected Versions: AMD Secure Processor affected versions not specified Description: The issue is related to insufficient input validation in the SVC ECC PRIMITIVE system call. This can be exploited by an attacker in a compromised user application or ABL to...

VulnCheck KEV: CVE-2023-21674

Microsoft Windows Advanced Local Procedure Call ALPC contains an unspecified vulnerability that allows for privilege escalation...

Microsoft Windows ALPC 安全漏洞

Microsoft Windows ALPC is an inter-process communication tool for high-speed messaging from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows ALPC. An attacker can exploit the vulnerability to elevate privileges...

CVE-2022-4422 SQLi in Bulutdesk Callcenter

Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0...

CVE-2022-43662

Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernelliteosa has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked...

Huawei EulerOS: Security Advisory for bluez (EulerOS-SA-2023-1090)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...