13097 matches found
CVE-2024-21305
Hypervisor-Protected Code Integrity HVCI Security Feature Bypass Vulnerability...
CVE-2024-21305
Hypervisor-Protected Code Integrity HVCI Security Feature Bypass Vulnerability...
CVE-2024-21305 Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
...
Parsing JSON serialized payload without protected field can lead to segfault
Summary Calling jws.Parse with a JSON serialized payload where the signature field is present while protected is absent can lead to a nil pointer dereference. Details This seems to also affect other functions that calls Parse internally, like jws.Verify. My understanding of these functions from t...
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
...
PT-2024-1032 · Microsoft · Message Queuing +1
Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing versions affected versions not specified Description: The issue is related to insufficient protection of service data in the Message Queuing component of Windows operating systems. It allows a remote attacker to gain...
PT-2024-1016 · Microsoft · Windows Message Queuing Client +1
Name of the Vulnerable Software and Affected Versions: Windows Message Queuing Client MSMQC affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Message Queuing Client MSMQC, which can allow a remote attacker to gain...
PT-2024-19006 · Jwx · Jwx
Name of the Vulnerable Software and Affected Versions: jwx versions prior to 1.2.28 jwx versions prior to 2.0.19 Description: The issue arises when calling jws.Parse with a JSON serialized payload where the signature field is present while protected is absent, leading to a nil pointer dereference...
Microsoft Hypervisor-Protected Code Integrity Security Vulnerability
Microsoft Hypervisor-Protected Code Integrity is a security feature of Windows from Microsoft Corporation USA that makes it difficult for malicious programs to hijack computers using low-level drivers. A security vulnerability exists in Microsoft Hypervisor-Protected Code Integrity. An attacker...
CVE-2023-52271
The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any Protected Process Light process via an IOCTL which will be named at a later time...
CVE-2023-52271
The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any Protected Process Light process via an IOCTL which will be named at a later time...
PPLBlade - Protected Process Dumper Tool
Protected Process Dumper Tool that support obfuscating memory dump and transferring it on remote workstations without dropping it onto the disk. Key functionalities : 1. Bypassing PPL protection 2. Obfuscating memory dump files to evade Defender signature-based detection mechanisms 3. Uploading...
The vulnerability of the DHCP server service in the Windows operating system allows a perpetrator to disclose protected information.
The vulnerability of the DHCP server service in Windows operating systems is related to the lack of protection for service-related data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...
The vulnerability of Mozilla Firefox browser tabs’ headers, which allows a hacker to disclose protected information
The vulnerability in the browser tabs headers of Mozilla Firefox relates to the disclosure of information through registration files. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...
GitLab 8.11 < 14.3.6 / 14.4 < 14.4.4 / 14.5 < 14.5.2 (CVE-2021-39931)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unde...
The vulnerability of the web server of the microprogramming software for the universal input/output controller ioLogik, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the web-server of the microprogramming software for universal input/output controller ioLogik is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected...
EventPrime < 3.3.6 - Unauthenticated Event Access
Description The plugin lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name. 1. Create a password-protected event or a private event then publish it. 2. Access to the URL on a private...
EventPrime < 3.3.6 - Unauthenticated Event Access
Description The plugin lacks authentication and authorization, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id/event name. PoC 1. Create a password-protected event or a private event then publish it. 2. Access to the URL on a private...
The vulnerability of the programming software for PLCs (programmable logic controllers), namely the Saia PG5 Controls Suite, arises from incorrect restrictions on XML references to external objects. This vulnerability allows attackers to gain unauthorized access to protected information.
The vulnerability of the programming software for PLCs programmable logic controllers, Saia PG5 Controls Suite, is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
NewStart CGSL MAIN 6.02 : curl Multiple Vulnerabilities (NS-SA-2023-0071)
The remote NewStart CGSL host, running version MAIN 6.02, has curl packages installed that are affected by multiple vulnerabilities: - curl 7.1.1 to and including 7.75.0 is vulnerable to an Exposure of Private Personal Information to an Unauthorized Actor by leaking credentials in the HTTP Refere...