18971 matches found
BeyondTrust Privilege Management Security Vulnerability
BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management Windows versions prior to 23.1 that originates from a vulnerability that allows an attacker to hijack a...
Acronis Cyber Protect Code Issue Vulnerability
Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. It combines backup, anti-malware, network security, and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A code issue...
New PoolParty Process Injection Techniques Outsmart Top EDR Solutions
A new collection of eight process injection techniques, collectively dubbed PoolParty, could be exploited to achieve code execution in Windows systems while evading endpoint detection and response EDR systems. SafeBreach researcher Alon Leviev said the methods are "capable of working across all...
CVE-2023-48861
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...
CVE-2023-48861
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...
CVE-2023-48861
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...
Spoofing
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...
TTplayer Security Breach
TTplayer 千千静听 is a free audio media player from China's TTplayer company that supports multiple audio formats. A security vulnerability exists in TTplayer version 7.0.2, which originates from a DLL hijacking vulnerability. The vulnerability can be exploited by an attacker to elevate privileges vi...
PT-2023-30990 · Microsoft · Urlmon.Dll
Name of the Vulnerable Software and Affected Versions: TTplayer version 7.0.2 Description: The issue allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll. This is a result of a DLL hijacking vulnerability. Recommendations: For TTplayer version 7.0.2, consider...
CVE-2023-48861
CVE-2023-48861 affects TTplayer (TTplayer 7.0.2). The vulnerability is a DLL hijacking issue in urlmon.dll that allows local attackers to escalate privileges and execute arbitrary code. The available sources consistently describe the core impact but do not provide a confirmed patch. PT-2023-30990...
CVE-2023-48861
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...
CVE-2023-48861
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll...
The vulnerability of the microprogrammed protection system for the SEL-451 phase-change order relay exists due to an unreliable authentication mechanism. This allows attackers to execute session hijacking attacks and bypass the authentication process.
The vulnerability of the SEL-451 phase-changing protection relay’s microprogramming software exists due to an unreliable authentication mechanism. Exploiting this vulnerability allows a malicious actor to perform session hijacking attacks and bypass the authentication process...
CVE-2023-42572
Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information...
CVE-2023-42573
PendingIntent hijacking vulnerability in Search Widget prior to version 3.4 in China models allows local attackers to access data...
CVE-2023-42572
Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information...
Information disclosure
Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information...
Spoofing
PendingIntent hijacking vulnerability in Search Widget prior to version 3.4 in China models allows local attackers to access data...
CVE-2023-42573
CVE-2023-42573 describes a PendingIntent hijacking vulnerability in the Search Widget on Samsung devices, affecting China models prior to version 3.4 . The underlying flaw allows local attackers to access data through hijacked PendingIntents. Connected sources specify that vulnerable versions are...