CVE-2022-37993

Windows Group Policy Preference Client Elevation of Privilege Vulnerability...

CVE-2022-37993

Windows Group Policy Preference Client Elevation of Privilege Vulnerability...

CVE-2022-37994

Windows Group Policy Preference Client Elevation of Privilege Vulnerability...

Privilege escalation

Windows Group Policy Preference Client Elevation of Privilege Vulnerability...

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

...

Windows Group Policy Preference Client Elevation of Privilege Vulnerability

...

Microsoft Windows Group Policy Preference Client 安全漏洞

Microsoft Windows is a set of operating systems for personal devices used by the U.S. Microsoft Windows Group Policy Preference Client has an elevation of privilege vulnerability, for which no details are available...

Microsoft Windows Group Policy Preference Client 安全漏洞

An elevation of privilege vulnerability exists in the Microsoft Windows Group Policy Preference Client, which stems from improper privilege assignment in the application and can be exploited by an attacker to cause Elevation of privilege...

CVE-2022-37994

Technical details about CVE-2022-37994—including affected product versions, root cause, exploitability, and remediation—are not disclosed in the provided connected documents. No concrete exploit information or fix is described here. Monitor official MSRC/NVD advisories for updates.

CVE-2022-37999 Windows Group Policy Preference Client Elevation of Privilege Vulnerability

...

LDAP Active Directory - Identity Data Enumeration

Binary data ldapenum.nbin...

Microsoft Windows Group Policy Preference Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. This vulnerability is dependent upon a Group Policy setting, and an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

PT-2022-5623 · Microsoft · Windows Group Policy Preference Client +1

Name of the Vulnerable Software and Affected Versions: Windows Group Policy Preference Client affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability that allows attackers to affect the system. It is caused by improper link resolution before fi...

CVE-2022-20360

In setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10...

Byobu user preference to prevent private discussions being started are not respected

Impact Users electing to prevent others starting private discussions with themselves. Please note that admins and others with appropriate permissions can always bypass this preference, as was the case before. Patches Users of Byobu should update the extension to version 1.1.7, where this has been...

GHSA-6GJM-6WJ6-4PX5 Byobu user preference to prevent private discussions being started are not respected

Impact Users electing to prevent others starting private discussions with themselves. Please note that admins and others with appropriate permissions can always bypass this preference, as was the case before. Patches Users of Byobu should update the extension to version 1.1.7, where this has been...

firefox security update

91.11.0-2.0.1 - Remove upstream references Orabug: 30143292 - Update distribution for Oracle Linux Orabug: 30143292 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file - Enabled aarch64 build 91.11.0-2 - Update to 91.11.0 build2 91.11.0-1 - Update to 91.11.0 build1...

GHSA-JVXX-8XXF-5495 phpMyAdmin CSRF Vulnerability

An issue was discovered in phpMyAdmin. When the argseparator is different from its default & value, the CSRF token was not properly stripped from the return URL of the preference import action. All 4.6.x versions prior to 4.6.5, 4.4.x versions prior to 4.4.15.9, and 4.0.x versions prior to...

GHSA-43R4-VM25-QM78 Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module

Multiple cross-site request forgery CSRF vulnerabilities in the Forum module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 allow remote attackers to hijack the authentication of arbitrary users for requests that set a tracking preference within 1...

BITB - Browser In The Browser (BITB) Templates

Browser templates for Browser In The Browser BITB attack. More information: https://mrd0x.com/browser-in-the-browser-phishing-attack/ Usage Each folder has a index.html file which has 4 variables that must be modified: XX-TITLE-XX - The title that shows up for the page e.g. Sign in to your accoun...