Nicomsoft WinI2C/DDC 安全漏洞

Nicomsoft WinI2C/DDC is a professional tool from Nicomsoft that allows you to control display devices via the DDC/CI protocol in a Windows environment. A security vulnerability exists in Nicomsoft WinI2C/DDC version v3.7.4.0, which originates from a security flaw in the component ddcdrv.sys. The...

HYPR 安全漏洞

HYPR is a security application from HYPR that implements Passwordless. A security vulnerability exists in HYPR Passwordless versions prior to 9.1 that stems from a cryptographic signature vulnerability in HYPR Passwordless on Windows that improperly verifies allowing malware updates...

The vulnerability in the web interface of the operating system administrator FortiOS allows a perpetrator to execute arbitrary commands.

The vulnerability in the Windows operating system’s administrator web interface, FortiOS.sv, relates to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted HTTP or HTTPS requests...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows an attacker to increase their privileges and gain access to confidential data

The vulnerability of the Win32k.sys component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain access to confidential data...

PT-2024-13057 · Intel · Intel Power Gadget

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for Windows affected versions not specified Description: The issue is related to improper neutralization in the IntelR Power Gadget software for Windows, which may allow an authenticated user to potentially enable...

CVE-2024-30032

Windows DWM Core Library Elevation of Privilege Vulnerability...

CVE-2024-30031

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability...

CVE-2024-29994

Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability...

QakBot attacks with Windows zero-day (CVE-2024-30051)

In early April 2024, we decided to take a closer look at the Windows DWM Core Library Elevation of Privilege Vulnerability CVE-2023-36033, which was previously discovered as a zero-day exploited in the wild. While searching for samples related to this exploit and attacks that used it, we found a...

CVE-2024-30051 Windows DWM Core Library Elevation of Privilege Vulnerability

...

CVE-2024-30049 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

...

CVE-2024-30015 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2024-30009 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

CVE-2024-33868

An issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection...

PT-2024-3705 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a use-after-free memory error in the CNG Key Isolation service of Windows operating systems. This can be exploited by a remote attacker to elevate their privileges...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Mark of the Web MOTW. The following products and versions are affected: Windows Server 2022 Server Core...

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...

The vulnerability in the implementation of the Server Message Block (SMB) protocol in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Server Message Block SMB protocol in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

VulnCheck KEV: CVE-2009-2445

Oracle iPlanet Web Server formerly Sun Java System Web Server or Sun ONE Web Server 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI...

PDF-XChange Editor 安全漏洞

PDF-XChange Editor is a PDF file viewing software from PDF-XChange, Inc. that runs on Microsoft Windows systems. A security vulnerability exists in PDF-XChange Editor, which originates from a JP2 File Parsing out-of-bounds write remote code execution vulnerability...