CVE-2023-27247

Cynet Client Agent v4.6.0.8010 allows attackers with Administrator rights to disable the EDR functions by disabling process privilege tokens...

Code injection

Cynet Client Agent v4.6.0.8010 allows attackers with Administrator rights to disable the EDR functions by disabling process privilege tokens...

CVE-2023-27247

CVE-2023-27247 concerns Cynet Client Agent v4.6.0.8010. The vulnerability enables local attackers with Administrator rights to disable EDR protection by disabl ing the process privilege tokens, effectively weakening security controls. The CVE entry provides a CVSS v3.1 base score of 4.4 (Medium) ...

Cynet Client Agent 安全漏洞

Cynet Client Agent is a client agent from Cynet Corporation. A security vulnerability exists in Cynet Client Agent version 4.6.0.8010, which stems from a vulnerability that allows EDR protection to be disabled via a process's privilege token...

kernel security, bug fix, and enhancement update

5.14.0-162.22.21.OL9 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

PT-2023-21862 · H2 +2 · H2 +3

Name of the Vulnerable Software and Affected Versions: GoCD versions 20.5.0 through 23.1.0 Description: The issue arises when the server environment is not correctly configured to provide access to the relevant PostgreSQL or MySQL backup tools, potentially leaking database access credentials to...

PT-2023-22030 · Cerebrate · Cerebrate

Name of the Vulnerable Software and Affected Versions: Cerebrate version 1.13 Description: A blind SQL injection issue exists in the "searchAll API endpoint". This allows for potential exploitation. Recommendations: For Cerebrate version 1.13, consider disabling access to the "searchAll API...

PT-2023-2360 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A critical issue affects the IMFCameraProtect.sys library in the IOCTL Handler component, leading to a stack-based buffer overflow due to the manipulation of the function...

PT-2023-17140 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A problematic vulnerability was found in the IOCTL Handler component of the library ObCallbackProcess.sys, affecting the function 0x222034/0x222038/0x22203C/0x222040. This leads to denial o...

PT-2023-2363 · Iobit · Iobit Malware Fighter

Name of the Vulnerable Software and Affected Versions: IObit Malware Fighter version 9.4.0.776 Description: A problematic vulnerability has been found in the ImfRegistryFilter.sys component of IObit Malware Fighter, related to incorrect clearing or release of resources. This affects the function...

[NetScaler] Graceful disable service may trigger TCP RESET immediately

According to eDoc:Graceful shutdown of services. If we disable an HTTP service with the following command: disable service HTTPSvcName 0 -graceFul YES We expect to see all ESTABLISHED connections alive. But in real cases, we may see partial connections got TCP RST from NetScaler ADC immediately...

PT-2023-17137 · Otcms · Otcms

Name of the Vulnerable Software and Affected Versions: OTCMS version 6.72 Description: A vulnerability was found in the function AutoRun of the file apiRun.php. The manipulation of the argument mode leads to cross-site scripting. The attack can be launched remotely. Recommendations: For OTCMS...

PT-2023-7473 · Ubiquiti · Ubiquiti Edgerouter X

Name of the Vulnerable Software and Affected Versions: Ubiquiti EdgeRouter X version 2.0.9-hotfix.6 Description: The issue exists due to insufficient input validation in the NAT Configuration Handler component of the Ubiquiti EdgeRouter's firmware, potentially allowing a remote attacker to execut...

PT-2023-17132 · Jianming · Jiangmin Antivirus

Name of the Vulnerable Software and Affected Versions: Jianming Antivirus version 16.2.2022.418 Description: A problematic issue has been found in the library kvcore.sys of the component IOCTL Handler, affecting the function 0x222000. This leads to denial of service and requires local access to...

PT-2023-8900 · Frrouting +8 · Frrouting +8

Name of the Vulnerable Software and Affected Versions: Frrouting bgpd version 8.4.2 Description: The issue is related to the bgp attr psid sub function in FRRouting, which can be exploited by a remote attacker to cause a denial of service. This is due to the lack of neutralization of special...

PT-2023-5119 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a buffer overflow read in the hostapd.cpp component of the Android operating system. This could lead to local information disclosure with System execution privileges needed, and...

PT-2023-17792 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: A permission bypass issue exists in the getAvailabilityStatus of several Transcode Permission Controllers due to a missing permission check. This could lead to local escalation of...

PT-2023-17114 · Zhong Bang · Crmeb

Name of the Vulnerable Software and Affected Versions: Zhong Bang CRMEB Java versions up to 1.3.4 Description: A critical issue affects the function getAdminList of the file "/api/admin/store/product/list". The manipulation of the argument cateId leads to sql injection. The attack can be initiate...

PT-2023-6548 · Jmsblog +1 · Jmsblog +1

Name of the Vulnerable Software and Affected Versions: PrestaShop jmsblog version 2.5.5 Description: The issue is related to a lack of protection for the SQL query structure in the Jms Blog module of the PrestaShop e-commerce web application. This can be exploited by a remote attacker to execute...

PT-2023-21030 · Swfdump · Swfdump

Name of the Vulnerable Software and Affected Versions: swfdump version 0.9.2 Description: A heap buffer overflow was discovered in the function swf GetPlaceObject at swfobject.c. Recommendations: For swfdump version 0.9.2, consider disabling the swf GetPlaceObject function as a temporary workarou...