21 matches found
mssqli-duet
MSSQLi-DUET - MSSQLインジェクションベースのドメインユーザー列挙ツール MSSQL用のSQLインジェクションスクリプトで、RIDブルートフォースに基づいてActive Directory環境からドメインユーザーを抽出します。SQLmapのtamper関数の実装を通じて、さまざまなWAF回避手法をサポートします。状況や環境に応じて、ユーザーが追加のtamper関数を組み込むこともできます。 Pythonスクリプト（ターミナル用）とBurp Suiteプラグイン（シンプルなGUIナビゲーション用）の2つのフレーバーがあります。...
ios-gamed-0day
Exploit de gamed en iOS corregido en 15.0.2 Actualización: Apple ha corregido esto silenciosamente en iOS 15.0.2 sin ningún tipo de reconocimiento o crédito público. Cualquier aplicación instalada desde App Store puede acceder a los siguientes datos sin que el usuario reciba ningún aviso: Correo...
EUVD-2023-57416
Malicious code in bioql PyPI...
EUVD-2023-58482
Malicious code in bioql PyPI...
Duet Display Installed (Windows)
Binary data duetdisplaywininstalled.nbin...
Duet Display Installed (macOS)
Binary data macosduetdisplayinstalled.nbin...
CVE-2023-6235
An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...
CVE-2023-6235
An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...
CVE-2023-6235
The CVE-2023-6235 issue affects Duet Display (version 2.5.9.1). It describes an uncontrolled search path element vulnerability that could let an attacker place an arbitrary libusk.dll in C:\Users\user\AppData\Local\Microsoft\WindowsApps, enabling execution and persistence of arbitrary code. This ...
CVE-2023-6235 Arbitrary code execution in Duet Display
An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...
Duet Display Security Vulnerability
Duet Display is a remote desktop application. A security vulnerability exists in Duet Display version 2.5.9.1 that stems from the presence of an uncontrolled search path element vulnerability. An attacker can place an arbitrary libusk.dll file in the C:UsersuserAppDataLocalMicrosoftWindowsApps...
CVE-2023-5075
A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevated privileges to execute arbitrary code...
CVE-2023-5075
A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevated privileges to execute arbitrary code...
Buffer overflow
A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevated privileges to execute arbitrary code...
CVE-2023-5075
CVE-2023-5075 affects Lenovo IdeaPad Duet 3-10IGL5 via a buffer overflow in the FmpSipoCapsuleDriver. The root cause is a vulnerability in the driver that could allow a local attacker with elevated privileges to execute arbitrary code. The available documents confirm the affected component and im...
CVE-2023-5075
A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevated privileges to execute arbitrary code...
Lenovo Bios Security Breach
Lenovo Bios is a boot method for computers from the Chinese company Lenovo Lenovo. It is used to boot the system during computer startup. A security vulnerability exists in Lenovo Bios that originates from a buffer overflow in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5...
PT-2023-31631 · Lenovo · Ideapad Duet 3-10Igl5
Name of the Vulnerable Software and Affected Versions: IdeaPad Duet 3-10IGL5 affected versions not specified Description: A buffer overflow was reported in the FmpSipoCapsuleDriver driver that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the...
Are TikTok’s new settings enough to keep kids safe?
TikTok, the now widely popular social media platform that allows users to create, share, and discover, amateur short clips—usually something akin to music videos—has been enjoying explosive growth since it appeared in 2017. Since then, it hasn’t stopped growing—more so during the current pandemic...
