CVE-2024-4017

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

CVE-2024-4017

BeyondTrust U-Series Appliance (Windows, 64-bit filesystem modules) is affected by CVE-2024-4017 due to improper privilege management allowing DLL side-loading. Affected versions are 3.4 through prior to 4.0.3; remediation is to upgrade to version 4.0.3 or later. Some sources confirm the vulnerab...

CVE-2024-4017 Privilege Escalation in U-Series Appliance

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

CVE-2024-4017 Privilege Escalation in U-Series Appliance

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

BlackTech Targets Tech, Research, and Gov Sectors New 'Deuterbear' Tool

Technology, research, and government sectors in the Asia-Pacific region have been targeted by a threat actor called BlackTech as part of a recent cyber attack wave. The intrusions pave the way for an updated version of modular backdoor dubbed Waterbear as well as its enhanced successor referred t...

CVE-2024-4017: Improper Privilege Management

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

PT-2024-28795 · Beyondtrust · Beyondtrust U-Series Appliance

Name of the Vulnerable Software and Affected Versions: BeyondTrust U-Series Appliance versions 3.4 through 4.0.2 Description: The issue is related to Improper Privilege Management in the BeyondTrust U-Series Appliance on Windows, 64-bit, specifically affecting the filesystem modules. This allows...

The vulnerability of the WordPress website content management system, related to the unlimited download of dangerous files, allows a hacker to execute arbitrary commands.

The vulnerability of the WordPress website content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche mobile device management web component is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the SYSTEM context...

VectorKernel - PoCs For Kernelmode Rootkit Techniques Research

PoCs for Kernelmode rootkit techniques research or education. Currently focusing on Windows OS. All modules support 64bit OS only. NOTE Some modules use ExAllocatePool2 API to allocate kernel pool memory. ExAllocatePool2 API is not supported in OSes older than Windows 10 Version 2004. If you want...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot security loading protocol for Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

CVE-2024-3660

A arbitrary code injection vulnerability in TensorFlow's Keras framework 2.13 allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application...

PT-2024-27091

Name of the Vulnerable Software and Affected Versions TensorFlow's Keras framework versions prior to 2.13 Description A code injection issue in TensorFlow's Keras framework allows attackers to execute arbitrary code with the same permissions as the application. This can be achieved by using a mod...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...

CVE-2024-28099

KEYENCE VT STUDIO versions 8.32 and earlier are vulnerable to an uncontrolled search path element (CWE-427) during the DLL loading process . This flaw allows an attacker to insecurely load Dynamic Link Libraries , potentially leading to the execution of arbitrary code with the privileges of the r...

CVE-2024-28099

VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

The vulnerability of the Jenkins automation server lies in its ability to allow unlimited loading of dangerous files, enabling a hacker to gain access to read, modify, or delete these files.

The vulnerability of the Jenkins automation server relates to the loading of files using the Stapler web platform. Stapler creates temporary files in a temporary directory system, with default permissions for newly created files. Exploiting this vulnerability allows an attacker to gain read,...

lcms:cmsIT8_load_fuzzer: Heap-buffer-overflow in SetDataFormat

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4862316173656064 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsIT8loadfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

SUSE CVE-2024-26744

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srptserviceguid parameter Make loading ibsrpt with this parameter set work. The current behavior is that setting that parameter while loading the ibsrpt kernel module triggers the following kerne...