2193 matches found
The vulnerability of the Windows User Profile Service in the Windows operating system allows a hacker to increase their privileges.
The vulnerability of the Windows User Profile Service in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2022-23616 Remote code execution in xwiki-platform
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible for an unprivileged user to perform a remote code execution by injecting a groovy script in her own profile and by calling the Reset password feature since t...
Microsoft Windows User Profile Service 资源管理错误漏洞
The Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A resource management error vulnerability exists in Microsoft Windows User Account Profile. The...
Cross-site Scripting (XSS) - Stored in microweber/microweber
Description Stored XSS occurs when changing a user's profile Proof of Concept txt XSS POC : "alertdocument.domain 1. Open the https://demo.microweber.org/demo/admin 2. Go to "Users" "Edit profile" 3. Change the value of "First Name" to XSS PoC 4. Refresh Impact Through this vulnerability, an...
Default configuration
BuddyBoss Platform through 1.8.0 allows remote attackers to obtain the email address of each user. When creating a new user, it generates a Unique ID for their profile. This UID is their private email address with symbols removed and periods replaced with hyphens. For example. email protected wou...
LearnPress < 4.1.5 - Arbitrary Image Renaming
Users of the plugin can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the image. As a result of this request,...
Microsoft Windows User Profile Service Directory Junction Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the User Profile...
CVE-2022-21919
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2022-21919
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2022-21895
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2022-21895
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2022-21895
Windows User Profile Service Elevation of Privilege Vulnerability...
Privilege escalation
Windows User Profile Service Elevation of Privilege Vulnerability...
Privilege escalation
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2022-21919 Windows User Profile Service Elevation of Privilege Vulnerability
...
CVE-2022-21919
CVE-2022-21919 is a Windows User Profile Service elevation-of-privilege bug. Connected docs describe the root cause as improper validation in profext.dll’s CreateDirectoryJunction, enabling a directory junction attack to escalate to SYSTEM by abusing UI/UX (Narrator/consent.exe) and UAC. Some sou...
CVE-2022-21895 Windows User Profile Service Elevation of Privilege Vulnerability
...
CVE-2022-21895
Technical details for CVE-2022-21895 are not publicly provided in the connected documents. The sources reference the CVE at a high level without product specifics, root cause, or remediation. Monitor for updates as new documents may disclose details.
