873 matches found
CVE-2022-21833
Virtual Machine IDE Drive Elevation of Privilege Vulnerability...
Privilege escalation
Virtual Machine IDE Drive Elevation of Privilege Vulnerability...
CVE-2022-21833 Virtual Machine IDE Drive Elevation of Privilege Vulnerability
...
CVE-2022-21833
CVE-2022-21833 is a Local Elevation of Privilege in Virtual Machine IDE Drive. The NVD entry lists CVSS-3.1 base score 7.8 (LOCAL, LOW privileges required, no user interaction, privilege escalation with CHANGED scope; impacts: CONFIDENTIALITY/HIGH, INTEGRITY/HIGH, AVAILABILITY/HIGH). Publicly vis...
Virtual Machine IDE Drive Elevation of Privilege Vulnerability
...
Microsoft Windows Virtual Machine 权限许可和访问控制问题漏洞
Microsoft Windows Virtual Machine is a virtualization technology from Microsoft USA. It allows you to run many virtual environments in a Windows environment. A vulnerability exists in the Microsoft Windows Virtual Machine IDE Drive with privilege permission and access control issues. The followin...
Mortar - Evasion Technique To Defeat And Divert Detection And Prevention Of Security Products (AV/EDR/XDR)
red teaming evasion technique to defeat and divert detection and prevention of security products.Mortar Loader performs encryption and decryption of selected binary inside the memory streams and execute it directly with out writing any malicious indicator into the hard-drive. Mortar is able to...
CVE-2021-20827
Plaintext storage of a password vulnerability in IDEC PLCs FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier allows an...
CVE-2021-20827
CVE-2021-20827 describes plaintext storage of a password vulnerability in IDEC PLCs, allowing an attacker to obtain PLC Web server credentials from SD cards (ZLD files) or file backups and potentially hijack the PLC. Affected products and versions include IDEC FC6A/MICROSmart All-in-One CPU Modul...
‘Quick Fix’ your C++ issues with SonarLint
When the team decided to implement quick fixes for C++, we committed to bringing value to the C++ user by providing more than what they had today. It appears we found multiple ways to do that. First, by providing an enhanced version of the checks natively available through the IDE and other...
Announcing Property Manager Extensions for the Integrated Development Environment
We’re proud to announce the 1.0 release of the Property Manager extension to Visual Studio Code and Eclipse. With the new Property Manager extension, you can edit and validate Property Manager API PAPI JSON rule trees right from your integrated development environment IDE. It allows you to make a...
CVE-2021-41249
GraphQL Playground is a GraphQL IDE for development of graphQL focused applications. All versions of graphql-playground-react older than [email protected] are vulnerable to compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names,...
CVE-2021-41249
All sources describe a GraphQL Playground XSS in graphql-playground-react older than v1.7.28. The vulnerability arises from compromised HTTP introspection responses or schema prop values containing malicious GraphQL type names, enabling dynamic XSS and potential code execution when a user loads a...
The vulnerability of the `ide_atapi_cmd_reply_end` function in the QEMU hardware emulation software involves reading data beyond the allowed buffer limits. This allows an attacker to access confidential data and also trigger a service failure.
The vulnerability of the ideatapicmdreplyend function in the QEMU hardware emulation software is related to reading data from within acceptable buffer limits. Exploiting this vulnerability can allow an attacker to access confidential data and also cause service failures...
Modernize Code Quality with ‘Quick Fixes’
Delivering functional code that is reliable, safe, and on schedule is a high priority for most development teams. And you’ll agree that the earlier in your workflow you address quality and security issues, the better and cheaper!. Today, I’d like to give you a quick tour of how you can maximize...
GHSA-V9W2-V7J9-RJPR Remote code execution in Eclipse Theia
In Eclipse Theia 0.3.9 to 1.8.1, the "mini-browser" extension allows a user to preview HTML files in an iframe inside the IDE. But with the way it is made it is possible for a previewed HTML file to trigger an RCE. This exploit only happens if a user previews a malicious file...
Remote code execution in Eclipse Theia
In Eclipse Theia 0.3.9 to 1.8.1, the "mini-browser" extension allows a user to preview HTML files in an iframe inside the IDE. But with the way it is made it is possible for a previewed HTML file to trigger an RCE. This exploit only happens if a user previews a malicious file...
Code injection in codiad
Codiad Web IDE through 2.8.4 allows PHP Code injection...
GHSA-V92M-HHHW-VV9V Code injection in codiad
Codiad Web IDE through 2.8.4 allows PHP Code injection...
Launching ‘Secret Detection’ to keep your Cloud ‘Secrets’ safe
Most digital applications we work on require some type of credentials –– to connect to a database with a username/password, to access computer programs via authorized tokens, or API keys to invoke services for authentication. Credentials a.k.a ‘Secrets’ are pieces of user or system level...