4104 matches found
Information disclosure
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...
CVE-2021-42956
CVE-2021-42956 affects Zoho ManageEngine Remote Access Plus Server for Windows, up to version 10.1.2132.6. Root cause: improper privilege management causes the server process to run as the logged-in user, enabling memory dump by non-admins. Impact: attacker could remotely dump sensitive informati...
CVE-2021-42956
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...
ZOHO ManageEngine Remote Access Plus 安全漏洞
ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO, Inc. An information disclosure vulnerability exists in ZOHO ManageEngine Remote Access Plus Server prior to version 10.1.2132.6, which stems from a privilege management Improperly managed, the process will start as a...
CVE-2021-42773
Broadcom Emulex HBA Manager/One Command Manager versions before 11.4.425.0 and 12.8.542.31, if not installed in Strictly Local Management mode, could allow a user to retrieve an arbitrary file from a remote host with the GetDumpFile command. In non-secure mode, the user is unauthenticated...
Broadcom Management Center 信息泄露漏洞
Broadcom Emulex HBA Manager formerly known as OneCommand Manager provides centralized management of Emulex HBAs in physical and virtual server deployments through a graphical user interface GUI and a fully scriptable command line user interface CLI. Manager versions prior to 11.4.425.0, 12.8.542....
CVE-2020-23873
pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump...
Heap overflow
pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump...
CVE-2020-23873
CVE-2020-23873 concerns pdf2xml v2.0, which has a reported heap-buffer overflow in the function TextPage::dump() . The vulnerability affects pdf2xml version 2.0 and is described with a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no privileges required, and no user interacti...
CVE-2020-23873
pdf2xml v2.0 was discovered to contain a heap-buffer overflow in the function TextPage::dump...
Pdf2xml 缓冲区错误漏洞
pdftoxml is an open source PDF to XML converter. pdftoxml version 2.0 of the TextPage::dump function has a heap buffer overflow vulnerability. There is no detailed vulnerability details provided...
CVE-2019-16240
A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C, and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain...
CVE-2019-16240
CVE-2019-16240 concerns a Buffer Overflow and Information Disclosure in HP OfficeJet Pro printers (before 001.1937C) and HP PageWide Managed/HP PageWide Pro printers (before 001.1937D). A maliciously crafted print file may cause the printer to assert, potentially producing a core dump to a local ...
Huawei HarmonyOS infinite self-recursive vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a microkernel-based distributed operating system. Huawei HarmonyOS is vulnerable to an infinite self-recursive vulnerability, which could be exploited by local attackers to cause a kernel dump...
Opencart 3 Extension TMD Vendor System SQL Injection
Exploit Title: Opencart 3 Extension TMD Vendor System - Blind SQL Injection Author: Muhammad Zaki Sulistya [email protected] Date: 03-11-2021 Product: TMD Vendor System Vendor Homepage: https://www.opencartextensions.in/ Software Link:...
HandleKatz - PIC Lsass Dumper Using Cloned Handles
This tool was implemented as part of our Brucon2021 conference talk and demonstrates the usage of cloned handles to Lsass in order to create an obfuscated memory dump of the same. It compiles down to an executable living fully in its text segment. Thus, the extracted .text segment of the PE file ...
Squid Game Crypto Scammers Rip Off Investors for Millions
Players in the Squid Game cryptocurrency market have been eliminated — at least their investment has — by what cryptocurrency watchers have called a classic “rug-pull” scam. When SQUID tokens were first released last week, they were valued at a paltry $0.01 but promised entry into a game with the...
GHSA-R496-7HGP-53WF Vulnerability in dump function leads to arbitrary code execution via filePath parameters
aaptjs is a node wraper for aapt. An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters...
Vulnerability in dump function leads to arbitrary code execution via filePath parameters
aaptjs is a node wraper for aapt. An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters...