CVE-2020-1337-exploit

CVE-2020-1337 Windows 권한 상승 이것은 WWWwrite-what-where 익스플로잇입니다 크레딧 Junyu Zhou @md5salt - 새로운 버그가 있을 수 있다고 말해준 사람. Wenxu Wu @ma7h1as - 제가 버그를 발견하고 이 익스플로잇을 작성했습니다. 작동 방식 CVE-2020-1048 패치에서 Microsoft는 XcvData 함수에서 portname의 유효성 검사 코드를 추가했습니다. 이는 PowerShell에서 Add-Printer를 호출하여 트리거할 수 있습니다. 이제 AddPort와...

EUVD-2023-58241

Malicious code in bioql PyPI...

CVE-2023-5973

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display...

CVE-2023-5973

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display...

CVE-2023-5973 Truncated port name

Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display...

CVE-2023-5973

Brocade Fabric OS Web Interface (v9.x and prior to v9.2.0) is affected by CVE-2023-5973 where portName values containing reserved characters are not represented correctly in the UI. An authenticated user could see altered port displays due to this handling issue. The CVE description and related a...

Brocade Fabric OS 访问控制错误漏洞

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A security vulnerability exists in Brocade Fabric OS version v9.x through versions prior to v9.2.0, which stems from the Web interface not properly representing the portName...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2020-1337 Windows Privilege Escalation this is a WWWwrite...

Sql injection

SQL injection vulnerability in port/modifyportform.php in Open Source Security Information Management OSSIM 0.9.9 rc5 allows remote authenticated users to execute arbitrary SQL commands via the portname parameter, which is not properly handled by a validation regular expression...

OSSIM 0.9.9rc5 (XSS/SQL Injection) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== OSSIM 0.9.9rc5 XSS/SQL Injection Multiple Remote Vulnerabilities ================================================================== Application: OSSIM http://www.ossim.net...