Lucene search
+L

19017 matches found

NVD
NVD
added 2022/11/09 9:15 p.m.35 views

CVE-2022-44555

The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable...

7.5CVSS0.00468EPSS
SaveExploits0References2
OSV
OSV
added 2022/11/09 9:15 p.m.6 views

CVE-2022-44555

The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable...

7.5CVSS5.7AI score0.00468EPSS
SaveExploits0References2
Prion
Prion
added 2022/11/09 9:15 p.m.29 views

Design/Logic Flaw

The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable...

5CVSS7.4AI score0.00468EPSS
SaveExploits0References2Affected Software2
Kitploit
Kitploit
added 2022/11/09 11:45 a.m.77 views

RDPHijack-BOF - Cobalt Strike Beacon Object File (BOF) That Uses WinStationConnect API To Perform Local/Remote RDP Session Hijacking

Cobalt Strike Beacon Object File BOF that uses WinStationConnect API to perform local/remote RDP session hijacking. With a valid access token / kerberos ticket e.g., golden ticket of the session owner, you will be able to hijack the session remotely without dropping any beacon/tool on the target...

7.6AI score
SaveExploits0References2
CVE
CVE
added 2022/11/09 12:00 a.m.65 views

CVE-2022-44555

CVE-2022-44555 affects Huawei HarmonyOS DDMP/ODMF module. The vulnerability is described as a service hijacking issue that can cause services to be unavailable. Technical context across connected records confirms the affected component is the DDMP/ODMF module, with impact limited to availability ...

7.5CVSS7.4AI score0.00468EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/11/09 12:00 a.m.49 views

CVE-2022-44555

The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable...

7.6AI score0.00468EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/11/09 12:00 a.m.12 views

PT-2022-27240 · Unknown · Ddmp/Odmf Module

Name of the Vulnerable Software and Affected Versions: DDMP/ODMF module affected versions not specified Description: The issue concerns a service hijacking vulnerability in the DDMP/ODMF module. If exploited, this could lead to services becoming unavailable. Recommendations: At the moment, there ...

7.5CVSS7.3AI score0.00468EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2022/11/09 12:00 a.m.9 views

CVE-2022-44555

The DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this vulnerability may cause services to be unavailable...

7.5AI score0.00468EPSS
SaveExploits0References2
OSV
OSV
added 2022/11/08 11:15 a.m.4 views

CVE-2022-43398

A vulnerability has been identified in POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50, POWER METER SICAM Q100 All versions V2.50. Affected devices do not renew the session cookie after login/logout and also accept us...

8.8CVSS5.7AI score0.00522EPSS
SaveExploits0References2
NVD
NVD
added 2022/11/07 8:15 p.m.23 views

CVE-2022-44744

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

7.3CVSS0.00169EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/07 8:15 p.m.14 views

CVE-2022-44744

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

7.3CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/07 8:15 p.m.17 views

Privilege escalation

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

4.1CVSS7.4AI score0.00169EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/11/07 7:00 p.m.32 views

CVE-2022-44744

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

2.2CVSS7.6AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/07 7:00 p.m.67 views

CVE-2022-44744

The CVE-2022-44744 issue affects Acronis Cyber Protect Home Office for Windows versions prior to build 40107. Root cause: DLL hijacking leading to local privilege escalation. Impact per NVD indicates high confidentiality, integrity, and availability implications with local attack vector and requi...

7.3CVSS7.4AI score0.00169EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/07 7:00 p.m.10 views

CVE-2022-44744

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107...

2.2CVSS7.5AI score0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/11/07 12:00 a.m.12 views

Acronis Cyber Protect 代码问题漏洞

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, network security, and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A security...

7.3CVSS5.6AI score0.00169EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/11/07 12:00 a.m.10 views

PT-2022-27294 · Acronis · Acronis Cyber Protect Home Office

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office Windows versions prior to build 40107 Description: The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. Recommendations: For versions prior to build 40107, update to buil...

7.3CVSS4.2AI score0.00169EPSS
SaveExploits0References4
Huntr
Huntr
added 2022/11/01 5:47 p.m.17 views

Reflected Cross Site Scripting leading to session hijacking

Description Basic XSS: XSS Cross-Site Scripting vulnerabilities arise when untrusted data gets interpreted as code in a web context. XSS attacks effectively make the attacker logged in as the target user, with the nasty addition of tricking the user into giving some information such as their...

6.3AI score
SaveExploits0
NVD
NVD
added 2022/10/31 9:15 p.m.17 views

CVE-2022-40291

The application was vulnerable to Cross-Site Request Forgery CSRF attacks, allowing an attacker to coerce users into sending malicious requests to the site to delete their account, or in rare circumstances, hijack their account and create other admin accounts...

8.8CVSS0.00309EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/31 9:15 p.m.19 views

Cross site request forgery (csrf)

The application was vulnerable to Cross-Site Request Forgery CSRF attacks, allowing an attacker to coerce users into sending malicious requests to the site to delete their account, or in rare circumstances, hijack their account and create other admin accounts...

6.8CVSS8.7AI score0.00309EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder