10626 matches found
CVE-2024-4017
Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...
CVE-2024-4017
BeyondTrust U-Series Appliance (Windows, 64-bit filesystem modules) is affected by CVE-2024-4017 due to improper privilege management allowing DLL side-loading. Affected versions are 3.4 through prior to 4.0.3; remediation is to upgrade to version 4.0.3 or later. Some sources confirm the vulnerab...
CVE-2024-4017 Privilege Escalation in U-Series Appliance
Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...
CVE-2024-4017 Privilege Escalation in U-Series Appliance
Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...
BlackTech Targets Tech, Research, and Gov Sectors New 'Deuterbear' Tool
Technology, research, and government sectors in the Asia-Pacific region have been targeted by a threat actor called BlackTech as part of a recent cyber attack wave. The intrusions pave the way for an updated version of modular backdoor dubbed Waterbear as well as its enhanced successor referred t...
The vulnerability of the WordPress website content management system, related to the unlimited download of dangerous files, allows a hacker to execute arbitrary commands.
The vulnerability of the WordPress website content management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
PT-2024-28795 · Beyondtrust · Beyondtrust U-Series Appliance
Name of the Vulnerable Software and Affected Versions: BeyondTrust U-Series Appliance versions 3.4 through 4.0.2 Description: The issue is related to Improper Privilege Management in the BeyondTrust U-Series Appliance on Windows, 64-bit, specifically affecting the filesystem modules. This allows...
The vulnerability in the Avalanche mobile device management web component allows a hacker to execute arbitrary commands with SYSTEM privileges.
The vulnerability of the Avalanche mobile device management web component is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the SYSTEM context...
VectorKernel - PoCs For Kernelmode Rootkit Techniques Research
PoCs for Kernelmode rootkit techniques research or education. Currently focusing on Windows OS. All modules support 64bit OS only. NOTE Some modules use ExAllocatePool2 API to allocate kernel pool memory. ExAllocatePool2 API is not supported in OSes older than Windows 10 Version 2004. If you want...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.
The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.
The vulnerability of the Secure Boot security loading protocol for Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
CVE-2024-3660
A arbitrary code injection vulnerability in TensorFlow's Keras framework 2.13 allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application...
PT-2024-27091
Name of the Vulnerable Software and Affected Versions TensorFlow's Keras framework versions prior to 2.13 Description A code injection issue in TensorFlow's Keras framework allows attackers to execute arbitrary code with the same permissions as the application. This can be achieved by using a mod...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.
The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...
CVE-2024-28099
CVE-2024-28099 affects VT STUDIO versions 8.32 and earlier. The root cause is an insecure DLL search path that may allow loading malicious DLLs, enabling arbitrary code execution with the application’s privileges. Reported across multiple sources (Red Hat, NVD, JVN/JVNVU, PT-Security, and others)...
CVE-2024-28099
VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...
The vulnerability of the Jenkins automation server lies in its ability to allow unlimited loading of dangerous files, enabling a hacker to gain access to read, modify, or delete these files.
The vulnerability of the Jenkins automation server relates to the loading of files using the Stapler web platform. Stapler creates temporary files in a temporary directory system, with default permissions for newly created files. Exploiting this vulnerability allows an attacker to gain read,...
SUSE CVE-2024-26744
In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srptserviceguid parameter Make loading ibsrpt with this parameter set work. The current behavior is that setting that parameter while loading the ibsrpt kernel module triggers the following kerne...
The vulnerability of the configuration file seccenter.exe of antivirus protection tools such as Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, and Bitdefender Antivirus Free allows a perpetrator to escalate their privileges or execute arbitrary code.
The vulnerability of the configuration file seccenter.exe used by antivirus protection software such as Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, and Bitdefender Antivirus Free is related to errors in system settings or configuration. Exploiting this...
