CVE-2024-34329

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload...

EUVD-2018-5201

Malware in sbrugna...

EUVD-2015-0982

Malware in sbrugna...

EUVD-2024-34725

Malicious code in bioql PyPI...

CVE-2024-34329

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload...

Exploit for CVE-2024-34329

CVE-2024-34329 Tested Product: Datacard XPS Card Printer Drive...

CVE-2024-34329

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload...

CVE-2024-34329

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload...

PT-2024-25789 · Entrust Datacard · Entrust Datacard Xps Card Printer Driver

Name of the Vulnerable Software and Affected Versions: Entrust Datacard XPS Card Printer Driver versions 8.5 and earlier without the dxp1-patch-E24-004 patch Entrust Datacard XPS Card Printer Driver versions 8.4 and earlier Description: The issue is related to insecure permissions in the Entrust...

CVE-2024-34329

CVE-2024-34329 affects Entrust Datacard XPS Card Printer Driver (versions 8.5 and earlier). The root cause is insecure permissions in the driver allowed by default installation paths, enabling unauthenticated local attackers to execute arbitrary code as SYSTEM via a crafted DLL payload. Multiple ...

Entrust Datacard Syntera CS Cross-Site Scripting Vulnerability

Entrust Datacard Syntera CS is an integrated suite for connecting Datacard distribution systems and specialized software from Entrust Datacard USA. A cross-site scripting vulnerability exists in version 5.x of Entrust Datacard Syntera CS. The vulnerability can be exploited by a remote attacker to...

CVE-2018-13252

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

CVE-2018-13252

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

CVE-2018-13252

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

Design/Logic Flaw

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

CVE-2018-13252

Entrust Datacard Syntera CS 5.x is affected by a Cross-Site Scripting (XSS) vulnerability in the login page, exploitable via the name field of the omain or Computer Name field. The Connected CNVD entry confirms a 5.x version impact and remote code execution is described as possible through the ...

CVE-2018-13252

Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page...

datacard.es Open Redirect vulnerability

Vulnerable URL: https://www.datacard.es/includes/redirect.jsp?url=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 4053594 VIP website status:| No...

ZTE Datacard MF190 Elevation of Privilege Vulnerability

The ZTE Datacard MF190 is a USB interface modem from ZTE Corporation ZTE of China. An elevation of privilege vulnerability exists in ZTE Datacard MF190 version 1.0.0B04. A local attacker can exploit this vulnerability to gain privileges...

CVE-2015-0974

Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying the 'Ucell Internet' directory to reference a malicious mmsdllr.dll or mediaplayerdll.dll...