CVE-2023-42126 G DATA Total Security GDBackupSvc Service Link Following Local Privilege Escalation Vulnerability

G DATA Total Security GDBackupSvc Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute low-privileged code on the...

CVE-2023-27347

CVE-2023-27347 affects G Data Total Security, specifically the Backup Service. The flaw allows local attackers who can execute low-privileged code to leverage a symbolic link in the Backup Service to create arbitrary files, enabling privilege escalation to the SYSTEM context. The vulnerability is...

CVE-2023-27347 G DATA Total Security Link Following Local Privilege Escalation Vulnerability

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2023-27347 G DATA Total Security Link Following Local Privilege Escalation Vulnerability

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

G Data 安全漏洞

G Data is an antivirus software from the German company G Data. A security vulnerability exists in G Data Total Security. An attacker could exploit the vulnerability to elevate privileges and execute arbitrary code in a SYSTEM environment...

G Data 安全漏洞

G Data is an antivirus software from the German company G Data. A security vulnerability exists in G DATA Total Security. An attacker could exploit the vulnerability to elevate privileges and execute arbitrary code in a SYSTEM environment...

CVE-2024-4140

An excessive memory use issue CWE-770 exists in Email-MIME, before version 1.954, which can cause denial of service when parsing multipart MIME messages. The patch set from 2020 and 2024 limits excessive depth and the total number of parts...

CVE-2024-4140

An excessive memory use issue CWE-770 exists in Email-MIME, before version 1.954, which can cause denial of service when parsing multipart MIME messages. The patch set from 2020 and 2024 limits excessive depth and the total number of parts...

WordPress plugin Woo Total Sales 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Woo Total Sales plugin <= 3.1.4 - Missing Authorization to Unauthenticated Sales Report Retrieval vulnerability

Missing Authorization to Unauthenticated Sales Report Retrieval vulnerability discovered by Lucio Sá in WordPress Plugin Woo Total Sales versions = 3.1.4...

WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Total Poll Lite versions = 4.9.9...

WordPress Total Poll Lite Plugin <= 4.9.9 is vulnerable to Broken Access Control

Software Total Poll Lite Type Plugin Vulnerable versions = 4.9.9 Fixed in 4.10.0 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32821 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c0cd27d36a6e Credits thiennv Required privilege...

total-lokal.de Cross Site Scripting vulnerability OBB-3919144

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hackers Target Middle East Governments with Evasive "CR4T" Backdoor

Government entities in the Middle East have been targeted as part of a previously undocumented campaign to deliver a new backdoor dubbed CR4T. Russian cybersecurity company Kaspersky said it discovered the activity in February 2024, with evidence suggesting that it may have been active since at...

CVE-2024-29964

Summary (CVE-2024-29964) : Brocade SANnav versions prior to 2.3.0a erroneously set file permissions, including for Docker-related files. This weakness can allow an unprivileged attacker with server access to read sensitive information from these files. Public sources consistently cite the same is...

CVE-2024-22014

An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete...

CVE-2024-22014

An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete...

CVE-2024-22014

CVE-2024-22014 affects 360 Total Security Antivirus (Windows) up to version 11.0.0.1061. The issue enables privilege escalation via Symbolic Link Follow to Arbitrary File Delete, indicating a vulnerability in how symbolic links are resolved when deleting files. Concrete affected product/version d...

360 Total Security 安全漏洞

360 Total Security is a suite of computer antivirus software from the Beijing, China-based company Qihoo Technology Limited 360. A security vulnerability exists in 360 Total Security Antivirus version 11.0.0.1061 Windows, which originated from a vulnerability that allows an attacker to delete...

CVE-2024-22014

An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbolic Link Follow to Arbitrary File Delete...