CVE-2021-44486

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in opwrite in srport/opwrite.c in order to gain control of the flow of execution...

Deep Panda deploys new rootkit “Fire Chili” by exploiting Log4shell in VMware horizon

THREAT LEVEL: Red For a detailed advisory, download the pdf file here Deep Panda, a Chinese APT group, took advantage of the well-known Log4Shell vulnerability in VMware Horizon servers to deploy a backdoor, rootkit, and steal sensitive data. This threat actor is primarily targeting firms in the...

PT-2022-12710

Name of the Vulnerable Software and Affected Versions Spoofer version 1.4.6 Description The issue allows an attacker with low privileges to escalate privileges by hijacking the execution flow of the application. This can be achieved by inserting a malicious executable in a higher-level directory...

Datarobot 代码注入漏洞

DataRobot Datarobot is an enterprise Ai platform from US-based DataRobot, Inc. It automates the entire process required for machine learning. Datarobot suffers from a code injection vulnerability that arises from a network system or product not properly filtering specific elements of externally...

Statamic 代码注入漏洞

Statamic is a powerful flat file Cms built on Laravel by Statamic, Inc. for storing all content, templates, assets, and settings in files instead of a database. Statamic suffers from a code injection vulnerability that arises from a network system or product not properly filtering specific elemen...

Insyde InsydeH2O permission permission and access control issues vulnerability

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. The vulnerability could be exploited to hijack the execution flow of code running in system...

Microsoft Visual Studio Code 代码注入漏洞

A code injection vulnerability exists in Microsoft Visual Studio Code, an open source code editor from Microsoft Corporation. The vulnerability stems from a network system or product that does not properly filter special elements in code segments constructed from external input data. An attacker...

Code injection

An issue was discovered in StorageSecurityCommandDxe in Insyde InsydeH2O with Kernel 5.1 before 05.14.28, Kernel 5.2 before 05.24.28, and Kernel 5.3 before 05.32.25. An SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this...

PT-2022-11823

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O with kernel 5.5 before 05.51.45 Insyde InsydeH2O with kernel 5.4 before 05.43.45 Insyde InsydeH2O with kernel 5.3 before 05.35.45 Insyde InsydeH2O with kernel 5.2 before 05.26.45 Insyde InsydeH2O with kernel 5.1 before 05.16.4...

PT-2022-11539

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O Kernel versions 5.0 through 05.08.41 Insyde InsydeH2O Kernel versions 5.1 through 05.16.41 Insyde InsydeH2O Kernel versions 5.2 before 05.23.22 Insyde InsydeH2O Kernel versions 5.3 before 05.32.22 Description An issue was...

PT-2022-11543

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O with Kernel 5.1 before 05.14.28 Insyde InsydeH2O with Kernel 5.2 before 05.24.28 Insyde InsydeH2O with Kernel 5.3 before 05.32.25 Description An issue was discovered in StorageSecurityCommandDxe, allowing an attacker to hijack...

PT-2022-16448

Name of the Vulnerable Software and Affected Versions InsydeH2O with kernel versions prior to 05.08.41 InsydeH2O with kernel versions prior to 05.16.29 InsydeH2O with kernel versions prior to 05.26.29 InsydeH2O with kernel versions prior to 05.35.29 InsydeH2O with kernel versions prior to 05.43.2...

Lexmark 代码注入漏洞

Lexmark is a series of printers in the U.S. A security vulnerability exists in Lexmark, which stems from a network system or product that does not properly filter special elements in code segments constructed from external input data. An attacker could exploit the vulnerability to generate an...

Microsoft Windows 代码注入漏洞

Microsoft Windows is a suite of operating systems for personal device use from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Modern Execution Server, which arises from a network system or product not properly filtering specific elements of externally input...

Microsoft Windows 代码注入漏洞

Microsoft Windows is a suite of operating systems for personal device use from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Geolocation Service, which arises from a network system or product not properly filtering specific elements of externally entered da...

Adobe After Effects 代码注入漏洞

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is primarily used for 2D and 3D compositing, animation, and visual effects production. A code injection vulnerability exists in Adobe After Effects, which...

Microsoft 4K Wireless Display Adapter 代码注入漏洞

The Microsoft 4K Wireless Display Adapter is a 4K wireless display adapter from Microsoft Corporation USA. A code injection vulnerability exists in the Microsoft 4K Wireless Display Adapter. The vulnerability arises from a network system or product not properly filtering specific elements of...

Microsoft 3D Viewer 代码注入漏洞

Microsoft 3D Viewer is a simplified and fast graphics editing application from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft 3D Viewer. The vulnerability arises from a network system or product not properly filtering specific elements of externally entered data...

Microsoft 3D Viewer 代码注入漏洞

A code injection vulnerability exists in Microsoft 3D Viewer, a simplified and fast graphics editing application from Microsoft Corporation USA. The vulnerability stems from the process of constructing code segments from external input data that is not properly filtered by the network system or...

Microsoft Excel 代码注入漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Excel. The vulnerability arises from a network system or product not properly filtering specific elements of externally entered data during t...