CVE-2022-2162

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0.5060.53 allowed a remote attacker to bypass file system access via a crafted HTML page...

CVE-2022-2160

Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a user's local files via a crafted HTML page...

The vulnerability of Firefox, Firefox ESR, and the Thunderbird email client is related to errors in displaying the percent symbol in directories %HOMEPATH% and %APPDATA%. This allows an attacker to trigger a service failure or execute arbitrary code.

The vulnerability of Firefox, Firefox ESR, and the Thunderbird email client on Windows operating systems is related to display errors for the percent symbol in directories %HOMEPATH% and %APPDATA%. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary...

ALPINE-CVE-2022-32223

Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...

The vulnerability of the PingID software for multi-factor authentication of applications in Windows occurs due to errors in verifying the connection with the local Java service. This allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the PingID software for multi-factor authentication of applications relates to errors in verifying the connection with the local Java service. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

CVE-2022-28225

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process...

CVE-2022-28330

Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the modisapi module...

May 19, 2022—KB5015013 (OS Build 20348.709) Out-of-band

None None...

Powershell Exec, Windows Command Shell, Windows x86 Bind Named Pipe Stager

Execute an x86 payload from a command via PowerShell. Spawn a piped command shell staged. Listen for a pipe connection Windows x86 Module Options msf use payload/cmd/windows/powershell/shell/bindnamedpipe msf payloadbindnamedpipe show actions ...actions... msf payloadbindnamedpipe set ACTION msf...

Powershell Exec, Windows Command Shell, Bind TCP Stager (No NX or Win7)

Execute an x86 payload from a command via PowerShell. Spawn a piped command shell staged. Listen for a connection No NX Module Options msf use payload/cmd/windows/powershell/shell/bindnonxtcp msf payloadbindnonxtcp show actions ...actions... msf payloadbindnonxtcp set ACTION msf payloadbindnonxtc...

Powershell Exec, Windows Command Shell, Reverse TCP Stager (IPv6)

Execute an x86 payload from a command via PowerShell. Spawn a piped command shell staged. Connect back to the attacker over IPv6 Module Options msf use payload/cmd/windows/powershell/shell/reverseipv6tcp msf payloadreverseipv6tcp show actions ...actions... msf payloadreverseipv6tcp set ACTION msf...

CVE-2022-26789

Windows Print Spooler Elevation of Privilege Vulnerability...

The vulnerability of the VMware Tools utility set for Windows operating systems arises from the use of an insecure search path, allowing a malicious actor to execute arbitrary code with system privileges.

The vulnerability of the VMware Tools utility set for Windows operating systems is related to the use of an insecure lookup path. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with system privileges...

CVE-2022-22516

The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write within restricted memory space...

BitComet Service for Windows Elevation of Privilege Vulnerability

BitComet is a BitTorrent client software written in C for the Microsoft Windows platform, which can also be used for HTTP/FTP downloads.An elevation of privilege vulnerability exists in BitComet Service for Windows, which can be exploited by attackers to elevate privileges to the system level...

Fingerprint Attendance 1.0 SQL Injection Vulnerability

Title: Fingerprint Attendance 1.0 Blind boolean SQLi To Rce Author: Hejap Zairy Vendor: https://www.vetbossel.in/fingerprint-attendance-project-php/ Software: https://app.box.com/s/xlyqalhvayq8oi25tqykcbouzrrjytqy Reference: https://github.com/Matrix07ksa Tested on: Windows, MySQL, Apache Steps 1...

Security Bulletin: A vulnerability in Java SE affects IBM Control Center (CVE-2021-2161)

Summary A flaw in the java.lang.ProcessBuilder API on the Windows platform leads to mishandling of escaped quotes inargument strings in certain circumstances. This allows an attacker to manipulate the Process command line andpotentially run unexpected commands.The fix ensures that quotes are...

CVE-2020-25182

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft...

CVE-2022-25250

When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions may allow an attacker to send a certain command to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to sh...

UltraVNC has an unspecified vulnerability

UltraVNC is an open source remote terminal control software for the Windows platform. versions of UltraVNC prior to 1.3.8.0 have a security vulnerability in the DSM plug-in that can be exploited by a locally authenticated attacker to achieve Local Elevation of Privilege LPE on vulnerable systems...