PT-2024-21447 · WordPress · Instawp Connect

Name of the Vulnerable Software and Affected Versions: InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress versions up to, and including, 0.1.0.22 Description: The issue is related to arbitrary file uploads due to insufficient file validation in the...

adtoi.in Cross Site Scripting vulnerability OBB-3883184

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-2416 · Parisneo +1 · Lollms-Webui +1

Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui version v9.8 Description: The issue is related to the missing client id parameter in lollms binding infos, leading to security vulnerabilities. Specifically, the endpoints "/reload binding", "/install binding", "/reinsta...

The vulnerability of Check Point Endpoint Security for Windows, a comprehensive security solution for network endpoints, allows an attacker to replace arbitrary files in the system and execute arbitrary code.

The vulnerability of Check Point Endpoint Security for Windows, a comprehensive security solution for network endpoints, is related to an improper definition of symbolic links before accessing files. Exploiting this vulnerability allows an attacker to replace arbitrary files in the system and...

Fortinet FortiClientEMS Inappropriate Privilege Management Vulnerability

Fortinet FortiClientEMS is part of Fortinet's Endpoint Management solution from Fortinet, a U.S.-based company, and is designed to help organizations effectively manage endpoint devices in their networks and provide monitoring and control of endpoint security. An improper privilege management...

HCL Technologies HCL BigFix Platform Cross-Site Scripting Vulnerability

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management, and remediation of endpoint security issues.Web is a Golang HTTP server from Ian Spence, a personal developer. Used for...

HCL Technologies HCL BigFix Platform Cross-Site Scripting Vulnerability

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in HCL BigFix Platform that stems from the...

Stop running security in passive mode

As we begin a new year, we wanted to address one of the biggest issues we consistently see in our investigations: passive security. Incident response engagements are an important part of our work and the intelligence-gathering process and their associated reports can be a treasure trove of tactic...

PT-2024-1793 · Kaspersky · Kaspersky Endpoint Security For Windows

Name of the Vulnerable Software and Affected Versions: Kaspersky Endpoint Security for Windows affected versions not specified Description: The issue is related to insecure privilege management in Kaspersky Endpoint Security for Windows. It may allow a remote attacker to suspend the operation of...

The vulnerability of the Encryption endpoint protection software, the threat detection and prevention software, and the Dell Endpoint Security Suite Enterprise and Dell Security Management Server – all of which are related to access control deficiencies – allow attackers to increase their privileges.

The vulnerability of the Encryption endpoint protection software, the threat detection and response software, and the Dell Endpoint Security Suite Enterprise and Dell Security Management Server related to security management are related to access control deficiencies. Exploiting this vulnerabilit...

PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface

Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, making it susceptible to unauthorized access. Work around: Ensure that inactivity-based screen locks are enforced on endpoints with access to the PAN-OS web interface...

CVE-2024-25210

Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/deleteexpense.php...

CVE-2023-50291

Insufficiently Protected Credentials vulnerability in Apache Solr. This issue affects Apache Solr: from 6.0.0 through 8.11.2, from 9.0.0 before 9.3.0. One of the two endpoints that publishes the Solr process' Java system properties, /admin/info/properties, was only setup to hide system properties...

CVE-2023-32479

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by...

Privilege escalation

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by...

CVE-2023-32479

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by...

CVE-2023-32479

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by...

CVE-2023-32479

CVE-2023-32479 affects Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server (all versions prior to 11.9.0). Root cause: improper ACLs in the non-default installation directory allow a local attacker to replace binaries and escalate privileges (e.g., obtain...

Dell Multiple Product Security Breaches

Dell Security Management Server is a data security management solution.Dell Encryption is a data protection solution.Dell Endpoint Dell Endpoint Security Suite is a network security suite. A security vulnerability exists in Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Securi...

PT-2024-1644 · Dell · Dell Endpoint Security Suite Enterprise +2

Name of the Vulnerable Software and Affected Versions: Dell Encryption versions prior to 11.9.0 Dell Endpoint Security Suite Enterprise versions prior to 11.9.0 Dell Security Management Server versions prior to 11.9.0 Description: The issue is related to a privilege escalation vulnerability due t...