SQL Monitor 12.1.31.893 - Cross-Site Scripting (XSS)

Exploit Title: SQL Monitor 12.1.31.893 - Cross-Site Scripting XSS Date: 12/21/2022 02:07:23 AM UTC Exploit Author: [email protected] Vendor Homepage: https://www.red-gate.com/ Software Link: https://www.red-gate.com/products/dba/sql-monitor/ Version: SQL Monitor 12.1.31.893 Tested on: Window...

CVE-2022-47542

Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privileges...

CVE-2022-47542

Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privileges...

Privilege escalation

Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privileges...

Red Gate SQL Monitor 安全漏洞

Red Gate SQL Monitor is a database monitoring software from Red Gate Inc. It is used to easily monitor SQL Server. A security vulnerability exists in Red Gate SQL Monitor versions 11.0.14 through 12.1.46 that stems from having incorrect access control and can be exploited by an attacker to elevat...

CVE-2022-47542

Red Gate SQL Monitor versions 11.0.14 through 12.1.46 are affected by Incorrect Access Control, enabling remote escalation of privileges. The CVE entry consistently cites this issue as a remote privilege-escalation vulnerability, with no exploitation details provided in the documents. Affected pr...

CVE-2022-47542

Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privileges...

PT-2023-15392 · Redgate · Redgate Sql Monitor

Name of the Vulnerable Software and Affected Versions: Red Gate SQL Monitor versions 11.0.14 through 12.1.46 Description: The issue is related to Incorrect Access Control, which can be exploited remotely for Escalation of Privileges. Recommendations: For versions 11.0.14 through 12.1.46, update t...

CVE-2022-47542

Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privileges...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen, whic...

Mozilla: Race condition leads to add more than 5 email at Data breaches monitor system at https://stage.firefoxmonitor.nonprod.cloudops.mozgcp.net

A race condition vulnerability was identified in the Mozilla Monitor application. The application was designed to limit users to adding a maximum of 5 email addresses for monitoring potential data breaches. However, due to the race condition, it was possible to bypass this restriction and add mor...

CVE-2023-1489

A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerability is the function 0x9C402088 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to improper access controls. The...

CVE-2023-1489

A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerability is the function 0x9C402088 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to improper access controls. The...

Improper access control

A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerability is the function 0x9C402088 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to improper access controls. The...

CVE-2023-1489

CVE-2023-1489 affects Lespeed WiseCleaner Wise System Monitor 1.5.3.54 via WiseHDInfo64.dll IoControlCode Handler function 0x9C402088, causing improper access controls. Local attack vector; exploit publicly disclosed. Multiple sources corroborate the vulnerability and its high impact (CVE details...

CVE-2023-1488

A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is the function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. It is...

CVE-2023-1487

A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects the function 0x9C40208C/0x9C402000/0x9C402084/0x9C402088/0x9C402004/0x9C4060C4/0x9C4060CC/0x9C4060D0/0x9C4060D4/0x9C40A0DC/0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 ...

CVE-2023-1488

A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is the function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. It is...

CVE-2023-1487

A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects the function 0x9C40208C/0x9C402000/0x9C402084/0x9C402088/0x9C402004/0x9C4060C4/0x9C4060CC/0x9C4060D0/0x9C4060D4/0x9C40A0DC/0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 ...

Information disclosure

A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is the function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. It is...