CVE-2022-24495

Windows Direct Show Remote Code Execution Vulnerability...

Remote code execution

Windows Direct Show - Remote Code Execution Vulnerability...

CVE-2022-24495

Windows Direct Show Remote Code Execution Vulnerability...

CVE-2022-24495 Windows Direct Show Remote Code Execution Vulnerability

...

CVE-2022-24495

CVE-2022-24495 corresponds to a Windows DirectShow remote code execution vulnerability. The connected documents confirm the affected technology (Windows DirectShow) and the CVE’s existence, but they do not provide concrete patch details, affected product/version specifics, or explicit remediation...

CVE-2022-24495 Windows Direct Show Remote Code Execution Vulnerability

...

Microsoft Windows Direct Show Remote Code Execution Vulnerability

Microsoft Windows Direct Show is an important part of the SDK for the Microsoft Windows platform, a new software development kit for multimedia applications based on Direct and COM technologies.Microsoft Windows Direct Show is vulnerable to a remote code execution vulnerability that could be...

CVE-2022-24495: Undefined Security Weakness

Windows Direct Show Remote Code Execution Vulnerability...

CVE-2022-29287: Authorization Bypass Through User-Controlled Key

Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user management rights default is Administrator to export the user options of any user, even ones with higher privileges like Global Administrators than the current user. The exported XML...

CVE-2021-42029

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal V15 All versions, SIMATIC STEP 7 TIA Portal V16 All versions V16 Update 5, SIMATIC STEP 7 TIA Portal V17 All versions V17 Update 2. An attacker could achieve privilege escalation on the web server of certain devices due to improper...

CVE-2021-42029

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal V15 All versions, SIMATIC STEP 7 TIA Portal V16 All versions V16 Update 5, SIMATIC STEP 7 TIA Portal V17 All versions V17 Update 2. An attacker could achieve privilege escalation on the web server of certain devices due to improper...

Windows Direct Show Remote Code Execution Vulnerability

...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows Direct Show is an important part of the SDK for the Microsoft Windows platform, a new software development kit for multimedia applications based on Direct and COM technologies.Microsoft Windows Direct Show is vulnerable to a remote code execution vulnerability that could be...

Combined Charging System 访问控制错误漏洞

Combined Charging System CCS is a combined charging system. The Combined Charging System CCS for DC suffers from a security vulnerability where an attack could use electromagnetic interference to wirelessly interrupt the necessary control communications between the vehicle and the charger from a...

CVE-2022-0828

The Download Manager WordPress plugin before 3.2.34 uses the uniqid php function to generate the master key for a download, allowing an attacker to brute force the key with reasonable resources giving direct download access regardless of role based restrictions or password protections set for the...

MTN Group: Unprotected Direct Object Reference

Hello MTN Security Team, During my hunting, I discovered that there's an Insecure Direct Object Reference on https://nin.mtnonline.com Vulnerable Path: https://nin.mtnonline.com/nin/success?message=1 Steps To Reproduce: You may not even require to submit any NIN before accessing this unprotected...

SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference Vulnerability

Exploit Title: SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference IDOR Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.sma.de Version: SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R Tested on: Linux Firefox CVE : CVE-2021-46416 Proof of Concept ============ Normal us...

SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference (IDOR)

Exploit Title: SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference IDOR Date: 7/4/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.sma.de Version: SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R Tested on: Linux Firefox CVE : CVE-2021-46416 Proof of Concept...

SAM SUNNY TRIPOWER 5.0 Insecure Direct Object Reference

Exploit Title: SAM SUNNY TRIPOWER 5.0 - Insecure Direct Object Reference IDOR Date: 7/4/2022 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://www.sma.de Version: SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R Tested on: Linux Firefox CVE : CVE-2021-46416 Proof of Concept...

envoy: Incorrect handling of internal redirects to routes with a direct response entry

A flaw was found in envoy. Due to incorrect handling of the common router, a segfault is possible when internal redirects are routes with a direct response entry...