66298 matches found
Moniker-Link-CVE-2024-21413-
Moniker-Link-CVE-2024-21413- 2024年2月13日，微软宣布了一个Microsoft Outlook远程代码执行与凭据泄露漏洞，编号为CVE-2024-21413（Moniker Link）。Check Point Research的Haifei Li因发现此漏洞而受到表彰。 该漏洞绕过了Outlook在处理一种特定类型的超链接（称为Moniker Link）时的安全机制。攻击者可以通过向受害者发送包含恶意Moniker Link的邮件来利用此漏洞，一旦受害者点击该超链接，Outlook就会将用户的NTLM凭据发送给攻击者。 漏洞评分详情如下表所示：...
CVE-2018-12633-TPLink-Auth-Bypass
CVE-2018-12633-TPLink-Auth-Bypass 针对 TP-Link TL-WR840N 固件中身份验证绕过漏洞（CVE-2018-12633）的技术案例研究与利用分析。 漏洞分析：TP-Link TL-WR840N 身份验证绕过（CVE-2018-12633） ⚠️ 免责声明： 本仓库仅用于教育和研究目的 。此处提供的分析旨在展示旧版固件中的漏洞，以强调生命周期管理和补丁应用的重要性。未经授权利用您不拥有的设备属于违法行为。 📄 执行摘要 本案例研究记录了对 CVE-2018-12633 的成功利用过程。该漏洞是 TP-Link TL-WR840N 无线 N 路由器...
CVE-2026-77827
Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80...
CVE-2024-27954
CVE-2024-27954 - WordPress wp-automatic 插件 LFI 扫描器 该项目提供了一个基于Python的本地文件包含（LFI）漏洞扫描器，针对 CVE-2024-27954 ，这是WordPress插件 wp-automatic 中发现的一个严重缺陷。该漏洞允许未经身份验证的攻击者使用 file:// 注入向量读取服务器上的任意文件。 🚨 漏洞概要 CVE-ID: CVE-2024-27954 组件: WordPress wp-automatic 插件 影响: 本地文件包含 LFI 风险: 远程未经身份验证的文件读取 例如...
EUVD-2026-74191
Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80...
CVE-2026-77827
Maono Link version 3.8.13 contains a local privilege escalation vulnerability in its MaonoAiServices Windows service. The root cause is improper write permissions on C:\ProgramData\Maono, allowing a standard user to modify service files and escalate privileges. The CVSS 3.1 score is 7.1 (HIGH) an...
CVE-2021-3310
CVE-2021-3310 Western Digital MyCloud PR4100 链接解析信息泄露漏洞 使用附带的文件在 mycloud OS 3 上触发该漏洞，该漏洞已在 OS 5 中修复。...
CVE-2026-78622
Okta Verify for Windows uninstaller is vulnerable to improper link resolution . The uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive ...
CVE-2026-78622 Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents...
internet-of-vulnerable-things
Internet de las Cosas Vulnerables Los resultados de mi pequeño trabajo de investigación sobre el tema de Internet de las Cosas Vulnerables. Resumen Este artículo proporciona una demostración práctica de lo inseguro que es Internet de las Cosas hackeando un dispositivo IoT típico. Se identificaron...
CVE-2026-83999
Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
CVE-2026-81963
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
CVE-2026-81824
The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link...
CVE-2026-70563
Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-70019
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
CVE-2026-69425
Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...
CVE-2026-69379
Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-69289
Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...