18923 matches found
CVE-2024-11216
CVE-2024-11216 affects PozitifIK Pik Online (pre-3.1.5). The vulnerability is an Authorization Bypass Through User-Controlled Key that can enable account footprinting and session hijacking. CVSSv3.1 base score 7.6 (HIGH): Network attack vector, Low attack complexity, privileges required: Low , us...
CVE-2024-11216 Broken Access Control in PozitifIK's Pik Online
Authorization Bypass Through User-Controlled Key, Exposure of Private Personal Information to an Unauthorized Actor vulnerability in PozitifIK Pik Online allows Account Footprinting, Session Hijacking. This issue affects Pik Online: before 3.1.5...
Exploit for CVE-2025-1094
CVE-2025-1094 - Đây chỉ là tài liệu mang tính chất học tập...
CVE-2024-57174
A misconfiguration in Alphion ASEE-1443 Firmware v0.4.H.00.02.15 defines a previously unregistered domain name as the default DNS suffix. This allows attackers to register the unclaimed domain and point its wildcard DNS entry to an attacker-controlled IP address, making it possible to access...
PozitifIK Pik Online 安全漏洞
PozitifIK Pik Online is an online exam application from PozitifIK, Inc. A security vulnerability exists in PozitifIK Pik Online version 05.03.2025 and earlier, which stems from an authorization bypass that could lead to account footprint tracking and session hijacking...
PT-2025-9842 · Cisco · Cisco Secure Client For Windows
Name of the Vulnerable Software and Affected Versions: Cisco Secure Client versions 4.9.00086 through 5.1.8.104 Description: A vulnerability exists in the interprocess communication IPC channel of Cisco Secure Client for Windows. This flaw could allow a locally authenticated attacker to perform a...
PT-2025-9830 · Unknown · Pik Online
Name of the Vulnerable Software and Affected Versions: Pik Online versions through 05.03.2025 Description: The issue allows for Authorization Bypass Through User-Controlled Key and Exposure of Private Personal Information to an unauthorized actor. This can lead to Account Footprinting and Session...
CVE-2024-57174
A misconfiguration in Alphion ASEE-1443 Firmware v0.4.H.00.02.15 defines a previously unregistered domain name as the default DNS suffix. This allows attackers to register the unclaimed domain and point its wildcard DNS entry to an attacker-controlled IP address, making it possible to access...
CVE-2020-23438
Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation...
CVE-2020-23438
Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation...
CVE-2024-10930
An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...
CVE-2024-10930
An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...
CVE-2024-10930 Carrier Block Load Privilege Escalation
An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...
CVE-2024-10930 Carrier Block Load Privilege Escalation
An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...
CVE-2024-10930
CVE-2024-10930 affects Carrier Block Load software (Carrier Inc.), versions 4.00–4.16. The issue is an Uncontrolled Search Path Element that could allow DLL hijacking and arbitrary code execution with elevated privileges. Exploitation is reportedly active per PT-2025-7322; multiple advisories (e....
Carrier Block Load
RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious actor to execute arbitrary code with escalated privileges . 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...
Mozilla多款产品 安全漏洞
Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software that is separate from the Mozilla...
Linux Distros Unpatched Vulnerability : CVE-2019-14899
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a...
CVE-2020-23438
CVE-2020-23438 affects Wondershare Filmora 9.2.11. The issue is described as a Trojan DLL hijacking leading to privilege escalation, enabling local attacks with low privileges and no user interaction required. The source entries consistently mention DLL hijacking as the root cause and privilege e...