The vulnerability of the Active Template Library in the Windows operating system allows attackers to exploit their privileges.

The vulnerability of the Active Template Library in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows operating system’s tracing service allows a hacker to increase their privileges.

The vulnerability of the Windows operating system’s tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the CSC service in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the CSC service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the splwow64.exe process in the Windows operating system, which allows a hacker to escalate their privileges

The vulnerability of the splwow64.exe process in Windows operating systems is related to call processing errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Remote Desktop Services RDS for Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of Windows Event Logging, a service in the Windows operating system, allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Event Logging service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the Pingsender process implementation of the Mozilla Firefox browser allows a hacker to increase their privileges.

The vulnerability in the Pingsender process of the Mozilla Firefox browser is related to errors during the download of the libcurl library. Exploiting this vulnerability can allow attackers to gain increased privileges...

Nextcloud: [nextcloud.com] Control character allowed in Submit Question

Issue descriptions We found that the maximum length of the first and last name fields was not set to 32 characters at registration and to 1000 characters when using the profile update form. The attacker can use this method as a malware attack, the user will redirect to a website that contains...

IBM Planning Analytics 信息泄露漏洞

IBM Planning Analytics is a suite of business planning and analytics solutions from IBM USA. The solution supports automated execution of processes such as business planning, budgeting and analysis. An information disclosure vulnerability exists in IBM Planning Analytics 2.0. The vulnerability...

The vulnerability of the io_uring function in the Linux operating system’s kernel allows attackers to increase their privileges.

The vulnerability of the iouring function in the Linux operating system’s kernel is related to privilege assignment errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the remote desktop service for Windows operating systems allows attackers to circumvent existing security restrictions and gain unauthorized access to the application.

The vulnerability of the remote desktop service for Windows operating systems is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain unauthorized access to the application...

BigBountyRecon - This Tool Utilises 58 Different Techniques To Expediate The Process Of Intial Reconnaissance On The Target Organisation

BigBountyRecon tool utilises 58 different techniques using various Google dorks and open source tools to expedite the process of initial reconnaissance on the target organisation. Reconnaissance is the most important step in any penetration testing or a bug hunting process. It provides an attacke...

GHSA-523C-XH4G-MH5M Denial of Service in Apache POI

Apache POI in versions prior to release 3.17 are vulnerable to Denial of Service Attacks: - Infinite Loops while parsing crafted WMF, EMF, MSG and macros POI bugs 61338 and 61294 - Out of Memory Exceptions while parsing crafted DOC, PPT and XLS POI bugs 52372 and 61295...

Google Android Information Disclosure Vulnerability (CNVD-2021-03553)

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS There is an information disclosure vulnerability, the vulnerability stems from the network system or product in the operation process there are configuration and other...

CVE-2020-9203

There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message for some application, causing this application to send this broadcast message and impact the customer's use experience...

CVE-2020-9139

There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory access errors and denial of service...

Input validation

There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory access errors and denial of service...

Information disclosure

There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message for some application, causing this application to send this broadcast message and impact the customer's use experience...

CVE-2020-9203

There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message for some application, causing this application to send this broadcast message and impact the customer's use experience...

CVE-2020-9139

There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory access errors and denial of service...