24 matches found
CVE-2024-38143
CVE-2024-38143 Windows WLAN 自动配置服务特权提升漏洞 成功利用此漏洞可能导致权限提升至 NT AUTHORITY\SYSTEM 背景 在一次客户项目中，我不得不测试一台实体笔记本电脑，不知为何，偶然发现了 Matthew Johnson 的这篇文章，这是他发现 CVE-2021-28316 的成果。我曾想是否有可能修改并实施类似类型的攻击，但结果发现它实际上从一开始就...直接成功了。当时的客户基本上是这么说的：“等等，这不应当对已修补的设备生效”。他没说错，这个漏洞据称已在 2021 年 4 月被修补。但显然并没有，因此这是一个未修复的漏洞。 再次复现 Po...
EUVD-2024-37102
Malicious code in bioql PyPI...
EUVD-2022-33531
Malicious code in bioql PyPI...
CVE-2025-21257
Windows WLAN AutoConfig Service Information Disclosure Vulnerability...
CVE-2025-21257 Windows WLAN AutoConfig Service Information Disclosure Vulnerability
...
CVE-2025-21257
CVE-2025-21257 corresponds to Windows WLAN AutoConfig Service Information Disclosure Vulnerability. The connected documents identify the affected component as the Windows WLAN AutoConfig Service and describe the issue as an information disclosure vulnerability, with local attack requirements (Loc...
Windows WLAN AutoConfig Service Information Disclosure Vulnerability
...
CVE-2025-21257: Out-of-bounds Read
Windows WLAN AutoConfig Service Information Disclosure Vulnerability...
CVE-2024-38143
CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...
CVE-2024-38143: Missing Authentication for Critical Function
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...
Microsoft Windows Multiple Vulnerabilities (KB5013942)
This host is missing an important security update according to Microsoft KB5013942 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2022-26935
Windows WLAN AutoConfig Service Information Disclosure Vulnerability...
CVE-2022-29121 Windows WLAN AutoConfig Service Denial of Service Vulnerability
...
CVE-2022-26935 Windows WLAN AutoConfig Service Information Disclosure Vulnerability
...
CVE-2022-29121: Undefined Security Weakness
Windows WLAN AutoConfig Service Denial of Service Vulnerability...
CVE-2022-26935: Undefined Security Weakness
Windows WLAN AutoConfig Service Information Disclosure Vulnerability...
CVE-2021-36967
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...
CVE-2021-36965
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability...