CVE-2024-0886

A vulnerability classified as problematic was found in Poikosoft EZ CD Audio Converter 8.0.7. Affected by this vulnerability is an unknown functionality of the component Activation Handler. The manipulation of the argument Key leads to denial of service. Local access is required to approach this...

PT-2024-15891 · Poikosoft · Poikosoft Ez Cd Audio Converter

Name of the Vulnerable Software and Affected Versions: Poikosoft EZ CD Audio Converter version 8.0.7 Description: A problematic vulnerability was found in the Activation Handler component. The manipulation of the Key argument leads to denial of service. Local access is required to approach this...

CVE-2024-0772

A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the component Registration Handler. The manipulation of the argument Name/Key leads to memory corruption. Local access is required to approach this attac...

PT-2024-15808 · Nsasoft · Nsasoft Sharealarmpro

Name of the Vulnerable Software and Affected Versions: Nsasoft ShareAlarmPro version 2.1.4 Description: A vulnerability was found in the Registration Handler component of Nsasoft ShareAlarmPro. The manipulation of the Name/Key argument leads to memory corruption. Local access is required to...

Automatic YouTube Gallery < 2.3.5 - Missing Authorization via AJAX actions

Description The Automatic YouTube Gallery plugin for WordPress is vulnerable to unauthorized plugin settings change due to a missing capability check on the ajaxcallbacksaveapikey and ajaxcallbackdeletecache functions in versions up to, and including, 2.3.3. This makes it possible for authenticat...

ROS-20231110-02

The vulnerability of the functions EVPEncryptInitex2, EVPDecryptInitex2, EVPCipherInitex2 of the OpenSSL cryptographic library is related to manipulation of the keylen/ivelens argument. OpenSSL library is related to manipulation of the keylen/ivelens argument. Exploitation of the vulnerability...

CVE-2019-25105

A vulnerability, which was classified as problematic, was found in dro.pm. This affects an unknown part of the file web/fileman.php. The manipulation of the argument secret/key leads to cross site scripting. It is possible to initiate the attack remotely. This product does not use versioning. Thi...

CVE-2022-1434

The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify data being sent from one endpoint to an OpenSSL 3.0 recipie...

Insecure Access Control

shinobi uses insecure access controls. An attacker is able to access the User/Admin/Super API functions through the use of JS Proto Method names held in an internal JS Object and trick the System into accepting supplied API Key that exists in the underlying JS object...

CVE-2019-9148

Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certification. Keys that are obviously invalid are not rejected during import. An attacker that is able to get a victim to import a manipulated key...

IEEE P1735 Cryptographic Issue Vulnerability (CNVD-2017-33396)

IEEE P1735 is a standard dedicated to encrypting the intellectual property of electronic designs. The implementation of IEEE P1735 is vulnerable to a cryptographic issue. An attacker could exploit this vulnerability to change the encryption key and inject a hardware Trojan horse into arbitrary...

CVE-2016-8007

Authentication bypass vulnerability in McAfee Host Intrusion Prevention Services HIPS 8.0 Patch 7 and earlier allows authenticated users to manipulate the product's registry keys via specific conditions...

Vulnerabilities found through code inspection — Mozilla

Security researcher Ronald Crane reported three vulnerabilities affecting released code that were found through code inspection. These included a buffer overflow in the ANGLE graphics library and two issues of missing status checks in SVG rendering and during cryptographic key manipulation. These...

Discuz! X-Series remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

0x01 vulnerability root causes The root of the problem is that the api/uc. php file in the updatebadwords method, the code is as follows: function updatebadwords$get, $post global $G; if! APIUPDATEBADWORDS return APIRETURNFORBIDDEN; $data = array; ifisarray$post foreach$post as $k = $v...

Debian Security Advisory DSA 2382-1 (ecryptfs-utils)

The remote host is missing an update to ecryptfs-utils announced via advisory DSA 2382-1. OpenVAS Vulnerability Test $Id: deb23821.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2382-1 ecryptfs-utils Authors: Thomas Reinke Copyright: Copyright c 2012 E-Sof...

Ubuntu 10.04 LTS / 10.10 / 11.04 : ecryptfs-utils vulnerabilities (USN-1188-1)

Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary locations, leading to privilege escalation. CVE-2011-1831 Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs...

Telecom Italy Alice Messenger Remote registry key manipulation Exploit

No description provided by source. !-- 04.50 20/08/2007 Telecom Italy Alice Messenger Hp.Revolution.RegistryManager.dll v.1 remote arbitrary registry key manipulation I mean this one: http://aiuto.alice.it/offerte/messenger/installazione.html this was 0day for a while, but ... who knows? the new...

Telecom Italy Alice Messenger - Remote Registry Key Manipulation

Telecom Italy Alice Messenger - Remote Registry Key Manipulation group="HKEYLOCALMACHINE" section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" key="sun-tzu" valType=1 'REGSZ value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config...

Telecom Italy Alice Messenger Remote registry key manipulation Exploit

Exploit for unknown platform in category remote exploits ====================================================================== Telecom Italy Alice Messenger Remote registry key manipulation Exploit ====================================================================== group="HKEYLOCALMACHINE"...

MS02-003: WinReg Remote Registry Key Manipulation (316056)

The key HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg is writeable by non-administrators. The installation software of Microsoft Exchange sets this key to a world-writeable mode. Local users could use this misconfiguration to escalate their privileges on this host. C Tenable...