CVE-2020-1337-exploit

CVE-2020-1337 Windows 权限提升 这是一个 WWW（写-什么-哪里）漏洞利用 致谢 Junyu Zhou（@md5salt），他告诉我可能存在一个新漏洞。 Wenxu Wu（@ma7h1as），我发现了该漏洞并编写了这个利用程序。 工作原理 在 CVE-2020-1048 的补丁中，微软在 XcvData 函数中增加了对 portname 的验证代码。 该验证可通过在 PowerShell 中调用 Add-Printer 来触发。 现在，AddPort 和 XcvData 函数都会检查当前用户是否有权访问 portname。 但我们仍然可以使用 junction...

EUVD-2023-58241

Malicious code in bioql PyPI...

CVE-2023-5973

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display...

CVE-2023-5973

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display...

CVE-2023-5973 Truncated port name

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display...

CVE-2023-5973

Brocade Fabric OS Web Interface (v9.x and prior to v9.2.0) is affected by CVE-2023-5973 where portName values containing reserved characters are not represented correctly in the UI. An authenticated user could see altered port displays due to this handling issue. The CVE description and related a...

Brocade Fabric OS 访问控制错误漏洞

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A security vulnerability exists in Brocade Fabric OS version v9.x through versions prior to v9.2.0, which stems from the Web interface not properly representing the portName...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2020-1337 Windows Privilege Escalation this is a WWWwrite...

Sql injection

SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...

CVE-2008-0920: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...

OSSIM 0.9.9rc5 (XSS/SQL Injection) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== OSSIM 0.9.9rc5 XSS/SQL Injection Multiple Remote Vulnerabilities ================================================================== Application: OSSIM http://www.ossim.net...