CVE-2023-28249 Windows Boot Manager Security Feature Bypass Vulnerability

...

CVE-2023-28235 Windows Lock Screen Security Feature Bypass Vulnerability

...

PT-2023-2718 · Microsoft · Azure Service Connector

Name of the Vulnerable Software and Affected Versions: Azure Service Connector affected versions not specified Description: The issue is related to errors in security settings of the Azure Service Connector, allowing a remote attacker to bypass existing security restrictions and elevate their...

KLA48835 Multiple vulnerabilities in Adobe Acrobat and Adobe Acrobat Reader

Multiple vulnerabilities were found in Adobe Acrobat and Adobe Acrobat Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. Input validation...

PT-2023-2307 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass in the Windows lock screen, which can be exploited due to errors in security settings. This could allow an attacker to bypass security...

PT-2023-2293 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the NTLM protocol in Windows operating systems, which is associated with insufficient access restrictions. This can allow an attacker to bypass...

PT-2023-2391 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Graphics Component of Windows operating systems. It allows an attacker to bypass security...

PT-2023-2299 · Microsoft · Windows Boot Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Boot Manager affected versions not specified Description: The issue is related to errors in security settings of the Windows Boot Manager, allowing an attacker to bypass security restrictions. This can potentially affect the system...

The vulnerability affects the automount demons of the Tor browser, Firefox, Firefox ESR, and the Thunderbird email client, allowing a hacker to bypass security restrictions.

The vulnerability in Tor browser, Firefox, Firefox ESR, and Thunderbird email client’s automatic uninstallation feature is related to insufficient protection of service data during file path processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotel...

APSB23-24 : Security update available for Adobe Acrobat and Reader

No description provided...

Sielco PolyEco Digital FM Transmitter 2.0.6 Authentication Bypass Exploit

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

Sielco PolyEco Digital FM Transmitter 2.0.6 Authorization Bypass Factory Reset

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

Sielco PolyEco Digital FM Transmitter 2.0.6 Account Takeover / Lockout / EoP

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

Sielco PolyEco Digital FM Transmitter 2.0.6 Radio Data System POST Manipulation

Summary PolyEco is the innovative family of high-end digital FM transmitters of Sielco. They are especially suited as high performance power system exciters or compact low-mid power transmitters. The same cabinet may in fact be fitted with 50, 100, 300, 500, 1000W power stage PolyEco50, 100, 300,...

GHSA-GV7G-X59X-WF8F SvelteKit framework has Insufficient CSRF protection for CORS requests

Summary The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a +server.js file, containing endpoint handlers for different HTTP methods. SvelteKit provides out-of-the-box cross-site request forgery CSRF protection to its users. The protection is...

CVE-2022-33959

IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users. IBM X-Force ID: 229320...

Google Chrome Picture In Picture Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Picture In Picture, which stems from an incorrect security UI in Picture In Picture. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome navigation security bypass vulnerability (CNVD-2023-67085)

Google Chrome is a web browser from Google, an American company. Google Chrome navigation security bypass vulnerability, which stems from an incorrect security UI in Navigation. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome Intents Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Intents, which is caused by insufficient policy enforcement in Intents. An attacker can exploit this vulnerability to bypass security restrictions...

Google Chrome FedCM Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome FedCM, which stems from an improper implementation in FedCM. An attacker can exploit this vulnerability to bypass security restrictions...