19043 matches found
CVE-2021-42110
Allegro Windows (formerly Popsy Windows) before version 3.3.4156.1 is affected by a DLL hijacking issue in the FTP module that allows a standard user to escalate to SYSTEM privilege. The root cause is DLL hijacking when the FTP module is installed. Impact is local privilege escalation to SYSTEM; ...
CVE-2021-42110
An issue was discovered in Allegro Windows formerly Popsy Windows before 3.3.4156.1. A standard user can escalate privileges to SYSTEM if the FTP module is installed, because of DLL hijacking...
CVE-2021-20047
SonicWall Global VPN client version 4.10.6 32-bit and 64-bit and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system...
CVE-2021-20047
SonicWall Global VPN client version 4.10.6 32-bit and 64-bit and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system...
CVE-2021-20047
SonicWall Global VPN client version 4.10.6 32-bit and 64-bit and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system...
Design/Logic Flaw
SonicWall Global VPN client version 4.10.6 32-bit and 64-bit and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system...
CVE-2021-20047
Affected product: SonicWall Global VPN Client (Windows) versions 4.10.6 and earlier. Vulnerability: DLL Search Order Hijacking in the client, enabling a local attacker to cause remote code execution on the target system. Evidence: advisory SNWLID-2021-0025 and Red Hat/NVD entries describe the fla...
SonicWall Global VPN Client DLL Search Order Hijacking
SonicWall Global VPN client version 4.10.6 32-bit and 64-bit and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system.IMPORTANT: At the time of advisory, there is no evidence to suggest tha...
Session Fixation in admidio/admidio
Description Session Fixation is an attack that permits an attacker to hijack a valid user session. The attack explores a limitation in the way the web application manages the session ID, more specifically the vulnerable web application. When authenticating a user, it doesn't assign a new session...
PT-2021-7720 · Zabbix +2 · Zabbix +2
Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to the lack of protection of the web page structure in Zabbix, allowing a remote attacker to impact data integrity. An authenticated user can create a hosts group from t...
Reprise License Manager 14.2 Session Hijacking
Product: Reprise License Manager 14.2 Vendor: Reprise Software CVE ID: CVE-2021-44151 Vulnerability Title: Unauthenticated Session Hijacking Severity: Medium/High Authors: Mark Staal Steenberg, Bilal El Ghoul, Gionathan Armando Reale, Andreas Fyhn Andersen, Oliver Lind Nordestgaard Date: 2021-11-...
Reprise License Manager 14.2 Session Hijacking Vulnerability
Product: Reprise License Manager 14.2 Vendor: Reprise Software CVE ID: CVE-2021-44151 Vulnerability Title: Unauthenticated Session Hijacking Severity: Medium/High Authors: Mark Staal Steenberg, Bilal El Ghoul, Gionathan Armando Reale, Andreas Fyhn Andersen, Oliver Lind Nordestgaard Introduction: ...
Allegro Windows 输入验证错误漏洞
Allegro Windows is an accounting and management solution from Allegro Belgium. An input validation error vulnerability exists in Allegro Windows, which arises from the product's failure to validate a called DLL file. An attacker could cause a DLL hijacking to elevate privileges to SYSTEM after...
Session Fixation in tsolucio/corebos
Description Session Fixation is an attack that permits an attacker to hijack a valid user session. The attack explores a limitation in the way the web application manages the session ID, more specifically the vulnerable web application. When authenticating a user, it doesn't assign a new session...
Cross-site Scripting (XSS) - Generic in uiwjs/react-md-editor
Description XSS vulnerability through the markdown editor Proof of Concept Steps to Reproduce Visit the demo page. Past the payload in the markdown editor. Impact - Steal a user's token - Session hijacking...
DLLHijackingScanner - This Is A PoC For Bypassing UAC Using DLL Hijacking And Abusing The "Trusted Directories" Verification
This is a PoC for bypassing UAC using DLL hijacking and abusing the "Trusted Directories" verification. Generate Header from CSV The python script CsvToHeader.py can be used to generate a header file. By default it will use the CSV file dllhijackingcandidates.csv that can be found here:...
Fortinet FortiClient Dylib injection (FG-IR-21-079) (macOS)
The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-079 advisory. - An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in ELECOM LAN routers WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and...
CVE-2021-20860
CVE-2021-20860 is a CSRF vulnerability in ELECOM LAN routers that allows a remote authenticated attacker to hijack administrator authentication via a crafted page. Affected devices span multiple ELECOM families (e.g., WRC-1167GST2, WRC-2533-series, WRC-1750GS, WRC-1900GST, and related EDWRC/WRH/W...