Micro Star MSI True Color 安全漏洞

Micro Star MSI True Color is a color calibration application from Micro Star Technology Micro Star Inc. of Taiwan, China. A security vulnerability exists in Micro Star MSI True Color that stems from an elevation of privilege LPE/EoP vulnerability in multiple components of the driver. All...

Acronis 多款产品安全漏洞

Acronis Cyber Protect and others are products of Acronis Singapore.Acronis Cyber Protect is a network protection product.Acronis True Image is a famous data backup and restore software.Acronis Agent is an agent software. A security vulnerability exists in several Acronis products that stems from...

Acronis 多款产品安全漏洞

Acronis Cyber Protect is a network protection product. True Image is a well-known data backup and restore software. Acronis Agent is a proxy software. Several Acronis products have security vulnerabilities that can be exploited by attackers to cause local elevation of privileges...

Acronis Cyber​​ Protect和Acronis True Image 代码问题漏洞

Acronis Cyber Protect and Acronis True Image are both products of Acronis Singapore.Acronis Cyber Protect is a cyber protection product. The software provides organizations with data backup, disaster recovery, artificial intelligence-based malware protection, etc. Acronis True Image is a well-kno...

CVE-2022-24114

Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office macOS before build 39605, Acronis True Image 2021 macOS before build 39287...

CVE-2021-44205

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office Windows before build 39612, Acronis True Image 2021 Windows before build 39287...

CVE-2022-24113

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 Windows before build 28035, Acronis Agent Windows before build 27147, Acronis Cyber Protect Home Office Windows before build 39612, Acronis True Image...

CVE-2021-44206

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service. The following products are affected: Acronis Cyber Protect Home Office Windows before build 39612, Acronis True Image 2021 Windows before build 39287...

CVE-2022-24115

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office macOS before build 39605, Acronis True Image 2021 macOS before build 39287...

WordPress The True Ranker 2.2.2 Plugin - Arbitrary File Read (Unauthenticated) Exploit

Exploit Title: WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read Unauthenticated Exploit Authors: Nicole Sheinin, Liad Levy Vendor Homepage: https://wordpress.org/plugins/seo-local-rank/ Software Link: https://plugins.svn.wordpress.org/seo-local-rank/tags/2.2.2/ Version: versions = 2.2...

WordPress The True Ranker 2.2.2 Arbitrary File Read

Exploit Title: WordPress Plugin The True Ranker 2.2.2 - Arbitrary File Read Unauthenticated Date: 23/12/2021 Exploit Authors: Nicole Sheinin, Liad Levy Vendor Homepage: https://wordpress.org/plugins/seo-local-rank/ Software Link: https://plugins.svn.wordpress.org/seo-local-rank/tags/2.2.2/ Versio...

WordPress Plugin Path Traversal Vulnerability (CNVD-2021-101672)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. True Ranker plugin is a WordPress open source application plugin. WordPress True Ranker plugin has a path traversal...

CVE-2021-39312

The True Ranker plugin = 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the /admin/vendor/datatables/examples/resources/examples.php file...

CVE-2021-39312 True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read

The True Ranker plugin = 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the /admin/vendor/datatables/examples/resources/examples.php file...

CVE-2021-39312

Summary: CVE-2021-39312 affects the WordPress True Ranker plugin prior to 2.2.4. The vulnerability is an improper filtering flaw in the local file inclusion path in ~/admin/vendor/datatables/examples/resources/examples.php, allowing an attacker to read arbitrary files (e.g., wp-config.php) via th...

CVE-2021-39312 True Ranker <= 2.2.2 Directory Traversal/Arbitrary File Read

The True Ranker plugin = 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the /admin/vendor/datatables/examples/resources/examples.php file...

True Ranker < 2.2.4 - Unauthenticated Arbitrary File Access via Path Traversal

The plugin allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the /admin/vendor/datatables/examples/resources/examples.php file. PoC Exploit Authors: Nicole Sheinin, Liad Levy Tested on: MacOS !/usr/bin/env python3...

WordPress 插件路径遍历漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. True Ranker plugin is a WordPress open source application plugin. WordPress True Ranker plugin has a path traversal...

WordPress True Ranker plugin <= 2.2.2 - Directory Traversal/Arbitrary File Read vulnerability

Directory Traversal/Arbitrary File Read vulnerability discovered by p7e4 in WordPress True Ranker plugin versions = 2.2.2. Solution Update the WordPress True Ranker plugin to the latest available version at least 2.2.4...

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

1. Impacted Products VMware Horizon VMware vCenter Server VMware HCX VMware NSX-T Data Center VMware Unified Access Gateway VMware WorkspaceOne Access VMware Identity Manager VMware vRealize Operations VMware vRealize Operations Cloud Cloud Proxy VMware vRealize Automation VMware vRealize...