40 matches found
CVE-2019-1315
Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...
MiniPlasma-Detection
كشف MiniPlasma CVE-2020-17103 قاعدة كشف Sigma لـ MiniPlasma، وهو استغلال لتصعيد الصلاحيات محلياً في ويندوز يستغل حالة سباق في cldflt.sys لاختطاف متغير البيئة windir لحساب SYSTEM، مما يعيد توجيه المهمة المجدولة WER QueueReporting لتنفيذ ملف ثنائي يتحكم فيه المهاجم بصلاحيات SYSTEM. تم الإبلاغ عن...
EUVD-2025-142512
Malicious code in butry-yust-wer npm...
EUVD-2025-142542
Malicious code in butry-mutyu-wer npm...
MAL-2025-10584 Malicious code in @zalastax/nolb-_wer (npm)
The package @zalastax/nolb-wer was found to contain malicious code...
CVE-2024-41514
A reflected cross-site scripting XSS vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter...
CVE-2024-41514
A reflected cross-site scripting XSS vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter...
CADClick 安全漏洞
CADClick is a software solution from CADClick, Inc. that creates interactive catalogs of 2D/3D CAD data for individual customer CAD catalogs. A security vulnerability exists in CADClick v1.11.0 and prior versions that stems from the presence of a Reflective Cross-Site Scripting XSS vulnerability...
CVE-2024-41514
A reflected cross-site scripting XSS vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter...
CVE-2020-16909
CVE-2020-16909 describes a local privilege-escalation flaw in Windows Error Reporting (WER) that arises when WER handles and executes files. An attacker could exploit a crafted application to gain higher privileges and access sensitive information and system functionality. The NVD entry notes a s...
CVE-2020-16905
CVE-2020-16905 describes an elevation-of-privilege flaw in Windows Error Reporting (WER) where the vulnerability is triggered through WER’s handling/execution of files. Exploitation could give an attacker higher privileges and access to sensitive system functionality by running a crafted applicat...
Windows Error Reporting Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...
wer-war-hitler.de Cross Site Scripting vulnerability OBB-1332885
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Microsoft Windows Multiple Vulnerabilities (KB4561612)
This host is missing a critical security update according to Microsoft KB4561612 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1263
CVE-2020-1263 describes an information disclosure vulnerability in Windows Error Reporting (WER). The issue arises from how memory objects are handled by WER, allowing an attacker to potentially access information they should not have. The affected component is Windows Error Reporting, and the ro...
CVE-2020-1261
CVE-2020-1261 is an information-disclosure vulnerability in Windows Error Reporting (WER). The issue arises from how WER handles memory objects, allowing potential exposure of memory contents. The CVE is stated as distinct from CVE-2020-1263. Public sources in the provided documents describe the ...
KB4561616: Windows 10 Version 1607 and Windows Server 2016 June 2020 Security Update
The remote Windows host is missing security update 4561616. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execu...
CVE-2020-1082
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...
CVE-2020-0753
Technical details for CVE-2020-0753 are not provided in the connected documents. The Initial Description only notes an Elevation of Privilege in Windows Error Reporting. Monitor for updates from Microsoft/MSRC for full specifics (affected products, root cause, and remediation).