PT-2023-13652 · Elastic · Endpoint Security

Name of the Vulnerable Software and Affected Versions: Elastic Endpoint Security for Windows affected versions not specified Description: An issue was discovered in the rollback feature, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38775

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38774

An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38774

Elastic Endpoint Security and Elastic Endgame for Windows contain a Local Privilege Escalation in the quarantine feature. Affected versions: Elastic Security up to 7.17.6 and 8.3.3; Elastic Endgame up to 3.62.2. Fixes are provided in Endpoint: 7.17.7 and 8.4.0; Endgame: 3.62.3. The advisory notes...

CVE-2022-38775

An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

CVE-2022-38775

Elastic Endpoint Security for Windows contains a rollback feature vulnerability that could let an unprivileged user escalate to LocalSystem. Affected version: 8.4.0; fix released in 8.4.1. The rollback feature is disabled by default and can be controlled via the windows.advanced.alerts.rollback.s...

Endpoint Security 8.4.0/7.17.7 and Endgame 3.62.3 Security Update

Elastic Endpoint Security Local Privilege Escalation issue ESA-2022-13 An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account. Affected...

Endpoint Security 8.4.1 Security Update

Elastic Endpoint Security Local Privilege Escalation issue ESA-2022-14 An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account. Affected Versions: Version 8.4.0...

Key takeaways from Malwarebytes 2023 State of Mobile Cybersecurity

The results of our latest survey on mobile cybersecurity in K-12 and hospitals are in--and its not all peaches and roses. When we talk about endpoint protection, its only natural to only think about the most commonly compromised endpoints like work laptops and servers--but your smartphone isnt of...

PT-2023-14720 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the /bsms ci/index.php/book endpoint and allows attackers to execute arbitrary web script...

VulnCheck KEV: CVE-2022-23714

A local privilege escalation LPE issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account...

Get Unified Cloud and Endpoint Security: Only $1 for 1,000 Assets for all of 2023!

As the new year begins, it's more important than ever to protect your business from the constantly evolving cyber threats that could compromise your valuable assets. But who wants to pay an arm and a leg for top-tier security? With this Uptycs introductory offer, you do not have to. Kickstart the...

PT-2023-15501 · Unknown · Lead Management System

Name of the Vulnerable Software and Affected Versions: Lead management system version 1.0 Description: The issue concerns SQL Injection via the id parameter in the "removeBrand.php" endpoint. This allows for potential manipulation of database queries. No information is provided about the estimate...

CVE-2023-22453 Discourse vulnerable to exposure of user post counts per topic to unauthorized users

Discourse is an option source discussion platform. Prior to version 2.8.14 on the stable branch and version 3.0.0.beta16 on the beta and tests-passed branches, the number of times a user posted in an arbitrary topic is exposed to unauthorized users through the /u/username.json endpoint. The issue...

Email exposure of users to an authorized user

Description Hello, this is an endpoint that leaks all the information of the users like names, email, role, and OpenID to an authenticated user Steps to reproduce 1 build the web app 2 either you host it locally or on a server 3 try to add users with their data 4 visite...

HCL Technologies HCL BigFix Platform 加密问题漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platforms from HCL Technologies, USA. The platform supports automated discovery, management and remediation of endpoint security issues. A security vulnerability exists in the HCL Technologies HCL BigFix Platform that...

Why Do I Need Zero Trust on My Endpoint If I Have EDR/XDR?

Do you need a Zero Trust solution if you have EDR/XDR installed? The short answer is yes — you need both...

Ivanti LANDESK Management Suite 安全漏洞

Ivanti LANDESK Management Suite LDMS is a suite of endpoint security management software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti LANDESK Management Suite that originates from allowing a user to execute commands with elevated privileges...

PT-2022-27198 · Tenda · Tenda I21

Name of the Vulnerable Software and Affected Versions: Tenda i21 version 1.0.0.144656 Description: The issue is related to a Buffer Overflow that can be triggered via the "/goform/setUplinkInfo" API endpoint. This allows for potential exploitation. Recommendations: For Tenda i21 version...

CVE-2022-24190

The /device/acceptBind end-point for Ourphoto App version 1.4.1 does not require authentication or authorization. The usertoken header is not implemented or present on this end-point. An attacker can send a request to bind their account to any users picture frame, then send a POST request to acce...