10420 matches found
RANGER Studio Directus Information Disclosure Vulnerability
RANGER Studio Directus is a set of open source headless CMS and API for managing custom databases from RANGER Studio, U.S.A. The Directus API is one of the components that can add a RESTful API layer to new or existing SQL databases. An information disclosure vulnerability exists in RANGER Studio...
RANGER Studio Directus License Issue Vulnerability
RANGER Studio Directus is a set of open source headless CMS and API for managing custom databases from RANGER Studio, U.S.A. The Directus API is one of the components that can add a RESTful API layer to new or existing SQL databases. An authorization issue vulnerability exists in the Directus 7...
RANGER Studio Directus Code Execution Vulnerability
RANGER Studio Directus is a set of open source headless CMS and API for managing custom databases from RANGER Studio, U.S.A. The Directus API is one of the components that can add a RESTful API layer to new or existing SQL databases. A security vulnerability exists in RANGER Studio Directus versi...
InduSoft Web Studio < v8.1 + SP3 Remote Command Injection Vulnerability
Binary data 701080.prm...
SQL injection vulnerability in we***.asp file of website building system of Pengcheng Network Studio in Lu'an Development Zone.
Lu'an City Development Zone Pengcheng Network Studio is a company that provides e-commerce solutions and value-added services for enterprises and merchants. There is a SQL injection vulnerability in the we.asp file of the website building system of Pengcheng Network Studio in the development zone...
RANGER Studio Directus Cross-Site Scripting Vulnerability
RANGER Studio Directus is the United States RANGER Studio company's set of open source for managing custom databases open source headless CMS and API. A cross-site scripting vulnerability exists in the interfaces/markdown/input.vue file in RANGER Studio Directus version 7 prior to Application...
Unspecified Vulnerability in RANGER Studio Directus
RANGER Studio Directus is a set of open source headless CMS and API for managing custom databases from RANGER Studio, U.S.A. The Directus API is one of the components that can add a RESTful API layer to new or existing SQL databases. A security vulnerability exists in the RANGER Studio Directus 7...
RANGER Studio Directus Code Execution Vulnerability (CNVD-2019-39679)
RANGER Studio Directus is a set of open source headless CMS and API for managing custom databases from RANGER Studio, U.S.A. The Directus API is one of the components that can add a RESTful API layer to new or existing SQL databases. A security vulnerability exists in the RANGER Studio Directus 7...
The vulnerability of the Microsoft Visual Studio software development tool lies in the incorrect limitation on XML references to external objects, which allows attackers to read arbitrary files.
The vulnerability of the Microsoft Visual Studio software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially created XML file...
The vulnerability of the update service for the Microsoft Visual Studio software allows a hacker to modify any files at will.
The vulnerability of the Microsoft Visual Studio software update service is related to privilege management errors. Exploiting this vulnerability could allow an attacker to modify arbitrary files using a specially created application...
Exploit for CVE-2019-0803
这个漏洞属于未正确处理GDI对象导致的UAF类型本地权限提升漏洞 看雪地址 复现环境 1. Windows 7 sp1 64位操作系统 2. 编译环境Visual Studio 2013 引用 360分析 看雪分析 Poc 分析 关于漏洞的成因,以上两篇引用文章对漏洞的成因已经介绍的很详细,这里不再赘述.本文主要分析漏洞复现的调试过程,和漏洞利用方式的讨论. 在poc中先创建大小为0x350的AcceleratorTable,计算公式为: ACCEL WINAPI CreateAcceleratorTableW InreadscAccel LPACCEL paccel,In int...
The vulnerability of the Microsoft.NET Framework software platform and the Visual Studio development environment, related to data processing flaws, allows attackers to execute arbitrary code.
The vulnerability of the Microsoft.NET Framework software platform and the Visual Studio development environment is related to data processing flaws. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...
The vulnerability of the Sn5CrPack and Sn5Crypto cryptographic containers in the Secret Net Studio information protection system, which allows a hacker to trigger a service failure.
The vulnerability of the Sn5CrPack and Sn5Crypto crypto containers in the Secret Net Studio information protection system lies in the ability to directly access the driver without going through the Sn5CryptoApi.dll library, by sending an IOCTL request. Exploiting this vulnerability can allow a...
The vulnerability of the Window Filtering Platform driver SNPAVdrv in the Secret Net Studio information protection system allows a hacker to execute arbitrary code in kernel mode.
The vulnerability of the Window Filtering Platform driver SNPAVdrv in the Secret Net Studio information protection system is related to the lack of proper checks on the input buffer. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode...
The vulnerability of the AuthIoDrv driver of the Secret Net Studio security system, which allows a hacker to cause a service failure.
The vulnerability of the AuthIoDrv driver of the Secret Net Studio information protection system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the krb_parse_authz_data function in the SnAuthRPC module of the Secret Net Studio security system allows a hacker to trigger a service failure.
The vulnerability of the krbparseauthzdata function in the SnAuthRPC module of the Secret Net Studio security system is related to errors in buffer offset calculations, which lead to the displacement of uninitialized memory areas. Exploiting this vulnerability could allow a remote attacker to cau...
The vulnerability of the Sn5Crypto.sys driver of the Secret Net Studio security system, which allows a hacker to trigger a service failure.
The vulnerability of the Sn5Crypto.sys driver of the Secret Net Studio security system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the krb_parse_authz_data function in the SnAuthRPC module of the Secret Net Studio security system allows a hacker to trigger a service failure.
The vulnerability of the krbparseauthzdata function in the SnAuthRPC module of the Secret Net Studio security system is related to the lack of checks for the execution of the memory allocation command. Exploitation of this vulnerability could allow a malicious actor to cause service failures...
Vulnerability in the antivirus component of the Secret Net Studio information protection system, allowing a perpetrator to trigger a service failure
The vulnerability in the antivirus component of the Secret Net Studio information protection system is related to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the krb_parse_authz_data function in the SnAuthRPC module of the Secret Net Studio security system allows a hacker to trigger a service failure.
The vulnerability of the krbparseauthzdata function in the SnAuthRPC module of the Secret Net Studio security system is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...