CVE-2023-3897

CVE-2023-3897 affects 42Gears SureMDM On-premise for Windows, version 6.31 and earlier. The root cause is CAPTCHA bypass that enables attacker to enumerate local usernames via error messages, leading to information disclosure. Impact is limited to credential/identity exposure as described in sour...

PT-2023-26709 · 42Gears · Suremdm

Name of the Vulnerable Software and Affected Versions: SureMDM On-premise versions 6.31 and below Description: The issue allows for username enumeration through bypassing CAPTCHA in the On-premise SureMDM Solution on Windows deployment. This enables an attacker to enumerate local user information...

CVE-2023-3897: Observable Discrepancy

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

CVE-2023-35322

Windows Deployment Services Remote Code Execution Vulnerability...

CVE-2023-35322

Windows Deployment Services Remote Code Execution Vulnerability...

CVE-2023-35321

Windows Deployment Services Denial of Service Vulnerability...

CVE-2023-35321

Windows Deployment Services Denial of Service Vulnerability...

Denial of service

Windows Deployment Services Denial of Service Vulnerability...

CVE-2023-35321 Windows Deployment Services Denial of Service Vulnerability

...

Microsoft Windows Deployment Services 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Deployment Services. An attacker could exploit this vulnerability to cause a denial of service. The following...

CVE-2023-35321: Improper Null Termination

Windows Deployment Services Denial of Service Vulnerability...

PT-2023-3922 · Microsoft · Windows Deployment Services +1

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services affected versions not specified Description: The issue is related to insufficient input validation in Windows Deployment Services, which can be exploited by a remote attacker to cause a denial of service...

Microsoft Windows Deployment Services 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Deployment Services. An attacker exploiting this vulnerability could remotely execute code. The following product...

PT-2023-3923 · Microsoft · Windows Deployment Services +1

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services affected versions not specified Description: The issue is related to insufficient input validation in Windows Deployment Services, which can be exploited by a remote attacker to execute arbitrary code, potentially...

CVE-2023-35322: Stack-based Buffer Overflow

Windows Deployment Services Remote Code Execution Vulnerability...

CVE-2022-38658 HCL BigFix Server Automation (SA) is affected by a security vulnerability around Notification Service

BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. Operators who use Notification Service related content from BES Support are at risk of leaving their SMTP sensitive data exposed...

Path traversal leads to arbitrary file deletions and file writes

Description Deploy and run gogs in Windows. Proof of Concept 1.Create a repository in Gogs, upload a file named test to the repository on the web page, The content of the file is as follows: xml 1111 2.The attacker can remove any files. http request: POST...

CVE-2021-34462

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability...

Microsoft Windows AppX Deployment Extensions 竞争条件问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in AppX Deployment Extensions in...

PT-2021-6037 · Microsoft · Windows Appx Deployment Extensions +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Extensions affected versions not specified Description: The issue is related to insufficient access restrictions in Windows AppX Deployment Extensions, allowing an attacker to elevate their privileges using a specially...