PT-2026-50558

In SignalRGB versions prior to 1.3.7.0, the .SignalIo device object is created without an explicit SDDL security descriptor and without FILE DEVICE SECURE OPEN. This results in overly permissive default access control, allowing any authenticated local user to obtain a handle to the device and iss...

EUVD-2025-8116

Malicious code in bioql PyPI...

Huawei PCs Authentication Bypass Vulnerability

Huawei PCs are a line of computers from the Chinese company Huawei. Huawei PCs suffer from an authentication bypass vulnerability that originates from a low-privileged user being able to bypass SDDL privilege checks, which can be exploited by an attacker to cause certain system processes to...

CVE-2023-52972

Huawei PCs have a vulnerability that allows low-privilege users to bypass SDDL permission checks . Successful exploitation this vulnerability could lead to termination of some system processes...

CVE-2023-52972

Huawei PCs have a vulnerability that allows low-privilege users to bypass SDDL permission checks . Successful exploitation this vulnerability could lead to termination of some system processes...

CVE-2023-52972

Huawei PCs have a vulnerability that allows low-privilege users to bypass SDDL permission checks . Successful exploitation this vulnerability could lead to termination of some system processes...

CVE-2023-52972

The CVE-2023-52972 entry describes an authentication bypass vulnerability in Huawei PC products that allows a low-privilege user to bypass SDDL permission checks, with exploitation potentially leading to termination of certain system processes. Affected software is Huawei PC products; the underly...

CVE-2023-52972: Improper Access Control

Huawei PCs have a vulnerability that allows low-privilege users to bypass SDDL permission checks . Successful exploitation this vulnerability could lead to termination of some system processes...

PT-2025-12860

Name of the Vulnerable Software and Affected Versions Huawei PCs affected versions not specified Description The issue allows low-privilege users to bypass SDDL permission checks. Successful exploitation could lead to the termination of some system processes. Recommendations At the moment, there ...

Metasploit Weekly Wrap-Up

AD CS certificate templates Our very own Spencer McIntyre has developed a new module that allows for creating, reading, updating and deleting certificate template objects from Active Directory. ESC4 Exploitation These changes notably enables the exploitation of the technique identified as ESC4...

File and Folder ACL (Windows)

The script List File and Folder ACL Windows. OpenVAS Vulnerability Test $Id: GSHBSMBSDDL.nasl 7061 2017-09-05 11:50:40Z teissa $ File and Folder ACL Windows Authors: Thomas Rotter Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net Set in an Workgroup Environment under...