736 matches found
CVE-2024-23826 Uploading an image with a specific filename causes a server-side DoS
spbusesite is the website of the Department of System Programming of St. Petersburg State University. Before 2024.01.29, when uploading an avatar image, an authenticated user may intentionally use a large Unicode filename which would lead to a server-side denial of service under Windows. This is...
CVE-2024-23826 Uploading an image with a specific filename causes a server-side DoS
spbusesite is the website of the Department of System Programming of St. Petersburg State University. Before 2024.01.29, when uploading an avatar image, an authenticated user may intentionally use a large Unicode filename which would lead to a server-side denial of service under Windows. This is...
Microsoft addresses App Installer abuse
28 October 2024 Update Microsoft disabled the ms-appinstaller URI scheme handler by default in App Installer on 28 December 2023 as a security response to protect customers from attackers’ evolving techniques against previous safeguards for CVE-2021-43890. Microsoft is pleased to announce that we...
December 12, 2023—KB5033371 (OS Build 17763.5206) - EXPIRED
None None...
December 12, 2023—KB5033373 (OS Build 14393.6529) - EXPIRED
None None...
December 12, 2023—KB5033379 (OS Build 10240.20345) - EXPIRED
None None...
KLA61974 Multiple vulnerabilities in Microsoft System Center
Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Windows Defender can be exploite...
Uninstall or Upgrade of Veeam Agent for Microsoft Windows Fails Due to Missing MSI
Challenge When attempting to uninstall or upgrade Veeam Agent for Microsoft Windows , the Windows dialog box appears stating: The feature you are trying to use is on a network resource that is unavailable. Click OK to try again, or enter an alternate path to a folder containing the installation...
Fedora 38 : thunderbird (2023-126cffa741)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-126cffa741 advisory. Update to 115.4.1 https://www.thunderbird.net/en-US/thunderbird/115.4.1/releasenotes/ https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/...
Code injection
Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This vulnerability can only be exploited if...
CVE-2023-46290 Rockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability
Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Services Platform . This vulnerability can only be exploited if...
CVE-2023-46290
Rockwell Automation CVE-2023-46290 affects FactoryTalk Services Platform version 2.74. The vulnerability arises from inadequate code logic that could allow a previously unauthenticated attacker to obtain a local Windows OS user token via the web service and use that token to log in, but only if t...
October 10, 2023—KB5031361 (OS Build 17763.4974) - EXPIRED
None None...
CVE-2023-44218
A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system with 'SYSTEM' level privileges, leading to a local privilege escalation LPE vulnerability...
Trawler - PowerShell Script To Help Incident Responders Discover Adversary Persistence Mechanisms
Dredging Windows for Persistence What is it? Trawler is a PowerShell script designed to help Incident Responders discover potential indicators of compromise on Windows hosts, primarily focused on persistence mechanisms including Scheduled Tasks, Services, Registry Modifications, Startup Items,...
How to disable the automatic launch Citrix Workspace App for Windows when logging into the OS
How to disable the automatic launch Citrix Workspace App for Windows when logging into the OS...
August 8, 2023—KB5029259 (OS Build 10240.20107) - EXPIRED
None None...
August 8, 2023—KB5029242 (OS Build 14393.6167) - EXPIRED
None None...
Xlight FTP Server 3.9.3.6 - Stack Buffer Overflow Exploit
Exploit Title: Xlight FTP Server 3.9.3.6 - 'Stack Buffer Overflow' DOS Discovered by: Yehia Elghaly Vendor Homepage: https://www.xlightftpd.com/ Software Link : https://www.xlightftpd.com/download/setup.exe Tested Version: 3.9.3.6 Vulnerability Type: Buffer Overflow Local Tested on OS: Windows XP...
Xlight FTP Server 3.9.3.6 Stack Buffer Overflow
Exploit Title: Xlight FTP Server 3.9.3.6 - 'Stack Buffer Overflow' DOS Discovered by: Yehia Elghaly Discovered Date: 2023-08-04 Vendor Homepage: https://www.xlightftpd.com/ Software Link : https://www.xlightftpd.com/download/setup.exe Tested Version: 3.9.3.6 Vulnerability Type: Buffer Overflow...