4938 matches found
Privilege escalation
Local privilege vulnerability in Yandex Browser for Windows prior to 21.9.0.390 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating files in directory with insecure permissions during Yandex Browser update process...
CVE-2021-26426
Windows User Account Profile Picture Elevation of Privilege Vulnerability...
CVE-2021-26424
Windows TCP/IP Remote Code Execution Vulnerability...
CVE-2021-34484 Windows User Profile Service Elevation of Privilege Vulnerability
...
EUVD-2021-13229
Windows TCP/IP Remote Code Execution Vulnerability...
TIETEN Acronis Cyber Protect 安全漏洞
TIETEN Acronis Cyber Protect is an application from TIETEN Acronis Cyber Protect TIETEN, China. provides the ability to unify your network protection by integrating backup, disaster recovery, AI-based malware protection, remote assistance, and security into a single, reliable tool. A security...
The vulnerability of the MS-EFSRPC protocol in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the MS-EFSRPC protocol in Windows operating systems is related to errors in processing SMB requests during authentication procedures. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
Microsoft Windows 信息泄露漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. An information disclosure vulnerability exists in Microsoft Windows. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windo...
The vulnerability of the SSH protocol implementation in the SolarWinds Serv-U File Server file server for Windows operating systems allows a perpetrator to execute arbitrary code or escalate their privileges.
The vulnerability of the SSH protocol implementation in the SolarWinds Serv-U File Server file server for Windows operating systems is related to the disclosure of information in the error data field. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or increase the...
CVE-2021-32578
Acronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to improper soft link handling issue 2 of 2...
UBUNTU-CVE-2021-30586
Use after free in dialog box handling in Windows in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Advantech Webaccess
This is a PoC Proof of Concept exploit for CVE-2016-0856, a vulnerability in the Windows RPC Remote Procedure Call service. The exploit targets the RpcClient and RpcDcClient classes in the bwconn.dll library. The exploit is written in Python and uses the ctypes library to interact with the Window...
CVE-2021-37594
In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSSIZE File Contents Request PDU...
NCH IVM assistant 路径遍历漏洞
NCH IVM Attendant is a complete voicemail, call attendant and IVR solution for Windows.A security vulnerability exists in NCH IVM Attendant, which could be exploited by an attacker to delete files by traversing the path with the logdeleteselected check0 parameter...
Nasty Windows Printer Driver Vulnerability
From SentinelLabs, a critical vulnerability in HP printer drivers: Researchers have released technical details on a high-severity privilege-escalation flaw in HP printer drivers also used by Samsung and Xerox, which impacts hundreds of millions of Windows machines. If exploited, cyberattackers...
CVE-2021-36934 Windows Elevation of Privilege Vulnerability
...
Vulnerability discovered in Microsoft Windows
Researchers have discovered a vulnerability in Microsoft Windows 10 build 1809 and later. A local, authenticated malicious person could exploit the vulnerability to read the local SAM database and execute arbitrary code with SYSTEM privileges. -= Microsoft =- Microsoft has not yet made updates...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
This is a proof-of-concept PoC exploit for CVE-2020-0796, also known as SMBGhost, a pre-authentication remote code execution vulnerability in Microsoft Windows. The exploit is written in Python and uses the SMB protocol to target vulnerable Windows systems. The exploit code is organized into...
Microsoft Edge 安全特征问题漏洞
Google Chrome is a web browser from the US company Google. Versions of Google Chrome prior to 92.0.4515.107 have a security vulnerability in Windows. An attacker could exploit this vulnerability to bypass security restrictions...