242 matches found
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
...
CVE-2024-43509 Windows Graphics Component Elevation of Privilege Vulnerability
...
SchoolPlus 1.0 SQL Injection
============================================================================================================================================= | Title : SchoolPlus v1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64 bits | ...
CVE-2024-40644
gitoxide An idiomatic, lean, fast & safe pure Rust implementation of Git. gix-path can be tricked into running another git.exe placed in an untrusted location by a limited user account on Windows systems. Windows permits limited user accounts without administrative privileges to create new...
GHSA-RVFH-H6C7-FC3C Gradio allows credential leakage on Windows
Gradio before 4.20 allows credential leakage on Windows...
CVE-2023-21773
creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html...
CVE-2023-36403
creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html...
CVE-2022-37990
creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2025-05-23 05:00:00+00:00| seen| https://projectzero.google/2025/05/the-windows-registry-adventure-7-attack-surface.html 2025-05-23...
CVE-2023-35358
creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2025-05-23...
IBM QRadar WinCollect Agent Resource Management Error Vulnerability
IBM QRadar WinCollect Agent is an agent program from International Business Machines IBM for collecting and sending Windows event logs. A resource management error vulnerability exists in IBM QRadar WinCollect Agent that stems from vulnerability to server-side request forgery attacks. No detailed...
Eclipse Jetty XXE Vulnerability (GHSA-58qw-p7qm-5rvh) - Windows
Eclipse Jetty is prone to a XML external entity XXE vulnerability in the XMLParser. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2023-47039 Perl: perl for windows binary hijacking vulnerability
A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell cmd.exe. When running an executable that uses the Windows Perl interpreter, Perl attempts to find and execute cmd.exe within the operating system...
Apache Tomcat DoS Vulnerability (Oct 2023) - Windows
Apache Tomcat is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:tomcat"; ...
Codecanyon Bitcoin Tools Suite 1.0 Local File Inclusion
======================================================================================================== | Title : Codecanyon Bitcoin Tools Suite v1.0 LFI Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2 32-bit | | Vendor :...
Active Super Shop 1.5.2 HTML Injection
==================================================================================================================================== | Title : Active super shop v1.5.2 HTML inject Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2...
CVE-2023-21818
Windows Secure Channel Denial of Service Vulnerability...
CVE-2023-21822 Windows Graphics Component Elevation of Privilege Vulnerability
...
Microsoft Windows HTTP.sys 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows HTTP.sys. The following products and versions are affected: Windows Server 2022,Windows Server 2022 Server Core installation,Windows 1...
PT-2023-14253 · Jitsi · Jitsi
Name of the Vulnerable Software and Affected Versions: Jitsi versions prior to commit 8aa7be58522f4264078d54752aae5483bfd854b2 Description: A command injection issue exists when launching browsers on Windows, allowing an attacker to insert an arbitrary URL, which could lead to remote execution...