CVE-2024-4017: Improper Privilege Management

Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit filesystem modules allows DLL Side-Loading.This issue affects U-Series Appliance: from 3.4 before 4.0.3...

VectorKernel - PoCs For Kernelmode Rootkit Techniques Research

PoCs for Kernelmode rootkit techniques research or education. Currently focusing on Windows OS. All modules support 64bit OS only. NOTE Some modules use ExAllocatePool2 API to allocate kernel pool memory. ExAllocatePool2 API is not supported in OSes older than Windows 10 Version 2004. If you want...

Secure Boot Bypass

The vulnerability of the Secure Boot security loading protocol for Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

Secure Boot Bypass

The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

CVE-2024-3660

A arbitrary code injection vulnerability in TensorFlow's Keras framework 2.13 allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application...

PT-2024-27091

Name of the Vulnerable Software and Affected Versions TensorFlow's Keras framework versions prior to 2.13 Description A code injection issue in TensorFlow's Keras framework allows attackers to execute arbitrary code with the same permissions as the application. This can be achieved by using a mod...

Secure Boot Bypass

The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to circumvent security restrictions...

CVE-2024-28099

KEYENCE VT STUDIO versions 8.32 and earlier are vulnerable to an uncontrolled search path element (CWE-427) during the DLL loading process . This flaw allows an attacker to insecurely load Dynamic Link Libraries , potentially leading to the execution of arbitrary code with the privileges of the r...

CVE-2024-28099

VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application...

Jenkins Automation Server File Access

The vulnerability of the Jenkins automation server relates to the loading of files using the Stapler web platform. Stapler creates temporary files in a temporary directory system, with default permissions for newly created files. Exploiting this vulnerability allows an attacker to gain read,...

lcms:cmsIT8_load_fuzzer: Heap-buffer-overflow in SetDataFormat

Project: https://github.com/mm2/Little-CMS.git Detailed Report: https://oss-fuzz.com/testcase?key=4862316173656064 Project: lcms Fuzzing Engine: libFuzzer Fuzz Target: cmsIT8loadfuzzer Job Type: libfuzzerasanlcms Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

SUSE CVE-2024-26744

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srptserviceguid parameter Make loading ibsrpt with this parameter set work. The current behavior is that setting that parameter while loading the ibsrpt kernel module triggers the following kerne...

seccenter.exe Privilege Escalation Arbitrary Code

The vulnerability of the configuration file seccenter.exe used by antivirus protection software such as Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, and Bitdefender Antivirus Free is related to errors in system settings or configuration. Exploiting this...

CVE-2023-52541

Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-52541

Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-52541

Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-52541

Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2023-52541

An authentication vulnerability exists in the Huawei HarmonyOS preload interface, specifically within the API for app pre-loading . This flaw, categorized under CWE-862 (Missing Authorization) , allows an attacker to compromise service confidentiality . The vulnerability affects the Huawei Harmon...

PT-2024-14613

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue concerns an authentication vulnerability in the API for app pre-loading. Successful exploitation of this vulnerability may affect service...

CVE-2023-52541: Missing Authorization

Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality...