1536 matches found
CVE-2023-3438
An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service mvagtsce.exe. The misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalwar...
Privilege escalation
An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service mvagtsce.exe. The misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalwar...
CVE-2023-3438
CVE-2023-3438 describes an unquoted Windows search path vulnerability in Trellix MOVE, affecting version 4.10.x and earlier. The issue arises from the mvagtsce.exe service binary, where an unquoted service path could be exploited by a local user to insert arbitrary code, enabling privilege escala...
Trellix MOVE 代码问题漏洞
Trellix MOVE is a grid-managed antivirus application for optimizing virtual environments from American FireEye Trellix. A security vulnerability exists in Trellix MOVE version 4.10.0 and prior versions. An attacker could exploit the vulnerability by inserting arbitrary code into an unquoted servi...
PT-2023-24851 · Move · Move
Name of the Vulnerable Software and Affected Versions: MOVE versions 4.10.x and earlier Description: An unquoted Windows search path vulnerability existed in the Windows install service, allowing an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privileg...
CVE-2023-34865
Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature...
PT-2023-11445 · Rancher · Rancher
Name of the Vulnerable Software and Affected Versions: Rancher versions 2.x through 2.6.12 Rancher versions 2.7.x through 2.7.3 Description: An issue allows users with certain access to a namespace to move it to a different project, potentially gaining access to project-specific resources and...
DEBIAN-CVE-2023-33968
Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to a missing access control vulnerability that allows a user with low privileges to create or transfer tasks to any project within the software, even if they have not...
PT-2023-24608
Name of the Vulnerable Software and Affected Versions Kanboard versions prior to 1.2.30 Description Kanboard is open source project management software that focuses on the Kanban methodology. The software is subject to a missing access control issue that allows a user with low privileges to creat...
move-in.lu Cross Site Scripting vulnerability OBB-3377685
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
move-in.lu Cross Site Scripting vulnerability OBB-3365998
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Expiration Time Not Checked in moveStakedLiquidity Function
Lines of code Vulnerability details Impact Liquidity moves are time-sensitive operations and the duration within which they are executed is crucial. If a user sets the expiry time to 0, it means that there is no expiration time set for the liquidity move. This can potentially allow the liquidity...
S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2023-014
S3 File System s3fs provides an additional file system to your Drupal site, which stores files in Amazon's Simple Storage Service S3 or any other S3-compatible storage service. This module may fail to validate that a file being requested to be moved to storage was uploaded during the same web...
move-in.lu Cross Site Scripting vulnerability OBB-3287457
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-6032-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6032-1 advisory. Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained an out-of- bounds write vulnerability. A local attacker coul...
PT-2025-54016
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the F2FS filesystem within the Linux kernel that could lead to potential data corruption when moving a directory. This issue is similar to one found and addressed in ext...
Roxy Fileman 1.4.5 Shell Upload
Exploit Title: Roxy Fileman 1.4.5 For .NET Arbitrary File Upload Date: 09/04/2023 Exploit Author: Zer0FauLT [email protected] Vendor Homepage: roxyfileman.com Software Link: https://web.archive.org/web/20190317053437/http://roxyfileman.com/download.php?f=1.4.5-net Version: = 1.4.5 Tested on:...
BZip3 缓冲区错误漏洞
BZip3 is a better, faster and stronger compressor from the individual developer Kamila Szewczyk. A security vulnerability exists in BZip3 versions prior to 1.2.3, which stems from an invalid memory move in bz3decodeblock resulting in a denial of service...
