Lucene search
+L

2274 matches found

Github Security Blog
Github Security Blog
added 2021/11/15 11:28 p.m.36 views

ERC1155Supply vulnerability in OpenZeppelin Contracts

When ERC1155 tokens are minted, a callback is invoked on the receiver of those tokens, as required by the spec. When including the ERC1155Supply extension, total supply is not updated until after the callback, thus during the callback the reported total supply is lower than the real number of...

2.5AI score
SaveExploits0References2Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2021/11/09 12:00 a.m.48 views

Kaspersky Total Security Directory Traversal Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Kaspersky Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6.1CVSS7.2AI score0.02601EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2021/11/03 12:00 a.m.9 views

VulnCheck KEV: CVE-2021-23874

McAfee Total Protection MTP contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense...

8.2CVSS7.1AI score0.01026EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/03 12:00 a.m.33 views

(0Day) Bitdefender Total Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7CVSS7.6AI score
SaveExploits0
OSV
OSV
added 2021/10/28 2:15 p.m.11 views

CVE-2021-3576

Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security...

7.8CVSS5.8AI score0.0096EPSS
SaveExploits0References3
OSV
OSV
added 2021/10/28 2:15 p.m.10 views

CVE-2021-3579

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint...

7.8CVSS5.8AI score0.00722EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/10/28 1:50 p.m.63 views

CVE-2021-3576 Privilege escalation via SeImpersonatePrivilege

Execution with Unnecessary Privileges vulnerability in Bitdefender Endpoint Security Tools, Total Security allows a local attacker to elevate to 'NT AUTHORITY\System. Impersonation enables the server thread to perform actions on behalf of the client but within the limits of the client's security...

7.8CVSS7.7AI score0.0096EPSS
SaveExploits0References3
CVE
CVE
added 2021/10/28 1:50 p.m.76 views

CVE-2021-3576

CVE-2021-3576 is a local privilege-escalation vulnerability in Bitdefender products (Endpoint Security Tools and Total Security). The root cause is an impersonation flaw where an untrusted process can impersonate the client of a pipe, enabling a local attacker to elevate to NT AUTHORITY\System. A...

7.8CVSS7.4AI score0.0096EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2021/10/28 1:50 p.m.73 views

CVE-2021-3579

CVE-2021-3579 affects Bitdefender Endpoint Security Tools for Windows and Bitdefender Total Security prior to 7.2.1.65. The issue is an Incorrect Default Permissions in the bdservicehost.exe and Vulnerability.Scan.exe components, enabling a local attacker to escalate privileges to NT AUTHORITY\SY...

7.8CVSS7.4AI score0.00722EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2021/10/28 1:50 p.m.34 views

CVE-2021-3579 Incorrect Default Permissions vulnerability in bdservicehost.exe and Vulnerability.Scan.exe

Incorrect Default Permissions vulnerability in the bdservicehost.exe and Vulnerability.Scan.exe components as used in Bitdefender Endpoint Security Tools for Windows, Total Security allows a local attacker to elevate privileges to NT AUTHORITY\SYSTEM This issue affects: Bitdefender Endpoint...

7.8CVSS7.7AI score0.00722EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/10/28 12:00 a.m.9 views

Total Security 安全漏洞

K7 Computing Total Security is a suite of antivirus software for the Windows platform from K7 Computing. A security vulnerability exists in Total Security that stems from an unwanted privilege enforcement vulnerability in the Bitdefender Endpoint Security tool, which allows a local attacker to...

7.8CVSS7.3AI score0.0096EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:00 a.m.46 views

(0Day) Bitdefender Total Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7CVSS5.9AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/10/28 12:00 a.m.33 views

(0Day) Bitdefender Total Security Unnecessary Privileges Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Bitdefender Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7CVSS5.9AI score
SaveExploits0
OSV
OSV
added 2021/10/26 10:15 p.m.11 views

CVE-2021-23877

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

7.8CVSS7.3AI score0.0037EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/26 10:15 p.m.5 views

CVE-2021-23877

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

7.8CVSS7.3AI score0.0037EPSS
SaveExploits0References2
Prion
Prion
added 2021/10/26 10:15 p.m.30 views

Privilege escalation

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

7.2CVSS7.7AI score0.0037EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/10/26 9:40 p.m.72 views

CVE-2021-23877

CVE-2021-23877 concerns the Windows trial installer of McAfee Total Protection (MTP) prior to version 16.0.34_x. The issue enables a local user to escalate privileges by replacing a specific temporary file created during installation, potentially allowing code execution with admin privileges. Aff...

7.8CVSS7.2AI score0.0037EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/26 9:40 p.m.31 views

CVE-2021-23877 McAfee Total Protection (MTP) - Privilege Escalation vulnerability

Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...

6.7CVSS7.9AI score0.0037EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/10/26 12:00 a.m.12 views

McAfee Total Protection 安全漏洞

Mcafee McAfee Total Protection MTP is a suite of antivirus software from Mcafee, Inc. in the United States. A security vulnerability exists in McAfee Total Protection MTP that stems from a lack of security measures such as authentication, access control, and privilege management in a network syst...

7.8CVSS7.3AI score0.0037EPSS
SaveExploits0References2
zdt
zdt
added 2021/10/19 12:00 a.m.345 views

Online Motorcycle (Bike) Rental System 1.0 - Blind Time-Based SQL Injection Exploit

Exploit Title: Online Motorcycle Bike Rental System 1.0 - Blind Time-Based SQL Injection Unauthenticated Exploit Author: Chase ComardelleCASO Vendor Homepage: https://www.sourcecodester.com/php/14989/online-motorcycle-bike-rental-system-phpoop-source-code.html Software Link:...

7.4AI score
SaveExploits0
Rows per page
Query Builder