CVE-2024-22752

EaseUS MobiMover 6.0.5 Build 21620 - 安全でないファイルとフォルダのアクセス許可 MobiMoverUILaunch.exe は権限昇格の脆弱性を抱えており、"認証されたユーザー"がサービス実行ファイルを自分の選択したバイナリに置き換えるために利用できます。この脆弱性は、"認証されたユーザーグループ"に割り当てられた弱いアクセス権限セットが原因で発生し、そのグループには M フラグ、つまり「変更権限」が付与されています。 ベンダーホームページ: https://www.easeus.com/ ソフトウェアリンク:...

CVE-2023-2315

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...

OpenCart Path Traversal vulnerability

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...

GHSA-V4J2-CWMM-XG89 OpenCart Path Traversal vulnerability

Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out arbitrary files on the server...

Rockstar Service - Insecure File Permissions Vulnerability

Exploit Title: Rockstar Service - Insecure File Permissions Exploit Author: George Tsimpidas Software Link : https://socialclub.rockstargames.com/rockstar-games-launcher Version Patch: 1.0.37.349 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Vulnerability Description:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the savemain operation in the adperms section in admin.php in MKPortal allows remote attackers to modify privilege settings, as demonstrated using a getURL of admin.php within a .swf file contained in an IFRAME element, aka the "All Guests are Admi...