2342 matches found
Microsoft PC Manager SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on Microsoft PC Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the permissions granted to an SAS token. An attacker can leverage this vulnerability to launch a supply-chain...
PT-2023-36417 · Undefined · Undefined
Уязвимость программного средства для обслуживания, очистки и обеспечения безопасности операционных систем Windows Microsoft PC Manager связана с возможностью обхода аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, реализовать атаку на цепочку поставок и...
PT-2023-36416 · Undefined · Undefined
Уязвимость программного средства для обслуживания, очистки и обеспечения безопасности операционных систем Windows Microsoft PC Manager связана с возможностью обхода аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, реализовать атаку на цепочку поставок и...
pc-devolter.at Cross Site Scripting vulnerability OBB-3697474
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-41929
A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows to exploit this vulnerability...
CVE-2023-41929
CVE-2023-41929 is a DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software prior to version 1.0.1. It enables a local attacker with valid Windows user privileges to escalate privileges. The issue is caused by loading a malicious DLL before the legitimate one, ...
MidgeDropper Variant Targets Work-from-Home Employees on Windows PCs
By Deeba Ahmed If you are working from home, you need to be on the lookout for the new and complex variant of MidgeDropper malware. This is a post from HackRead.com Read the original post: MidgeDropper Variant Targets Work-from-Home Employees on Windows PCs...
Wacom driver backlink vulnerability
Wacom driver is a driver for connecting and managing platform computers. A backlink vulnerability exists in Wacom Drivers for Windows, which stems from a specific flaw in the Tablet PC service, which can be abused to create files by creating symbolic links that can be exploited to elevate...
pc-boost.com Cross Site Scripting vulnerability OBB-3650914
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
HP PC BIOS September 2023 Security Updates for OpenSSL
Potential vulnerabilities have been identified in the system BIOS of HP PCs using OpenSSL 1.1.1, which might allow denial of service. HP is releasing BIOS updates to OpenSSL 1.1.1s to mitigate these potential vulnerabilities. HP has identified affected platforms and corresponding SoftPaqs with...
Design/Logic Flaw
I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the user originates a call on the device, then the device's modem may reset and cause the phone call to not succeed. This may block the user from dialing...
pcfactory.hu Cross Site Scripting vulnerability OBB-3629940
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
pcexpansion.es Cross Site Scripting vulnerability OBB-3605704
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Intel NUC Competitive Conditions Issue Vulnerability
The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the IntelR NUC BIOS firmware. An attacker can exploit the vulnerability to elevate privileges...
August 8, 2023—KB5029296 (Monthly Rollup)
None None...
Intel® NUC Kit and Mini PC BIOS Firmware Advisory
Summary: Potential security vulnerabilities in some Intel® NUC Kit and Mini PC BIOS firmware may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-37336 Description:...
Moderate: samba security and bug fix update
Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. Security Fixes: samba: SMB2 packet signing is not enforced when "server...
CVE-2023-35818
An issue was discovered on Espressif ESP32 3.0 ESP32rev300 ROM devices. An EMFI attack on ECO3 provides the attacker with a capability to influence the PC value at the CPU context level, regardless of Secure Boot and Flash Encryption status. By using this capability, the attacker can exploit...
pc-schladen.de Cross Site Scripting vulnerability OBB-3515258
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...