Adobe Character Animator out-of-bounds read vulnerability

Adobe Character Animator is a motion capture and animation tool that provides everyone with an easy-to-use solution for intuitively animating 2D characters, animating in real time, and easily sharing and publishing characters. an out-of-bounds read vulnerability exists in Adobe Character Animator...

CVE-2021-34462

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability...

CVE-2021-3614

CVE-2021-3614 concerns Lenovo notebook BIOS: Condition: attacker with physical access can elevate privileges during a BIOS update performed via Lenovo Vantage on some Lenovo notebooks. Root cause hint in connected CNNVD entry suggests lack of authentication measures in the BIOS update process. Im...

CVE-2021-34449 Win32k Elevation of Privilege Vulnerability

...

Metasploit Wrap-Up

Eternal Blue improvements Prior to this release Metasploit offered two separate exploit modules for targeting MS17-010, dubbed Eternal Blue. The Ruby module previously only supported Windows 7, and a separate ms17010eternalbluewin8 Python module would target Windows 8 and above. Now Metasploit...

Security Bulletin: IBM Data Replication Affected by Multiple Vulnerabilities in IBM Java SDK

Summary This bulletin covers common Java SDK vulnerability findings in the IBM Java SDK packaged with this offering. Vulnerability Details CVEID: CVE-2019-11771 DESCRIPTION: Eclipse OpenJ9 could allow a local attacker to gain elevated privileges on the system, caused by the inclusion of unused...

Acronis True Image 安全漏洞

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image suffers from a security vulnerability that stems from an insecure XPC servic...

PT-2021-4152 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows InstallService, which is caused by insecure privilege management. This vulnerability can be exploited to allow...

Microsoft Projected File System 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Projected File System in...

PT-2021-6017 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Win32k component of Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: At the moment...

PT-2021-5263

Name of the Vulnerable Software and Affected Versions Azure AD affected versions not specified Description The issue is related to errors in security settings of the Azure Active Directory Azure AD service in Microsoft Windows operating systems. It allows a remote attacker to bypass the...

Microsoft Windows Cloud Files Mini Filter Driver 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Cloud Files Mini Filter Driver in Microsoft...

PT-2021-4166 · Microsoft · Windows Storage Spaces Controller +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Spaces Controller affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Storage Spaces Controller, which is caused by insecure privilege management. This...

PT-2021-6965 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component, allowing an attacker to potentially elevate their privileges. This could affect the system, but...

PT-2021-4847 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Event Tracing service of the Microsoft Windows operating system. Exploitation of this issue may allow an attacker to...

WordPress WP Fluent Forms plugin cross-site request forgery vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL.A cross-site request forgery vulnerability exists in versions of WordPress WP Fluent Forms plugin prior ...

WordPress ProfilePress plugin elevation of privilege vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An elevation of privilege vulnerability exists in the ProfilePress plugin for WordPress versions 3.0...

CVE-2021-1576

Multiple vulnerabilities in the web-based management interface of Cisco Business Process Automation BPA could allow an authenticated, remote attacker to elevate privileges to Administrator. These vulnerabilities are due to improper authorization enforcement for specific features and for access to...

Authorization

Multiple vulnerabilities in the web-based management interface of Cisco Business Process Automation BPA could allow an authenticated, remote attacker to elevate privileges to Administrator. These vulnerabilities are due to improper authorization enforcement for specific features and for access to...

Google Android 缓冲区错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11, which can be exploited by an attacker to cause...