EUVD-1999-0576

Malware in sbrugna...

EUVD-2006-3439

Malware in sbrugna...

EUVD-2019-9833

Malware in sbrugna...

EUVD-2024-28004

Malicious code in bioql PyPI...

EUVD-2024-28003

Malicious code in bioql PyPI...

EUVD-2024-40337

Malicious code in bioql PyPI...

CVE-2019-1268

An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'...

CVE-2018-5354

The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code and escalate privileges via spoofing. When the client is configured to use HTTP, it does not authenticate the intended server before opening a browser window. An unauthenticated...

The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Winlogon entry program in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild

Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity. The Patch Tuesday...

Patch Tuesday - October 2024

Microsoft is addressing 118 vulnerabilities this October 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for five of the vulnerabilities published today, although it does not rate any of these as critical yet. Of those five, Microsoft lists two as...

Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities

The largest Microsoft Patch Tuesday since July includes two vulnerabilities that have been exploited in the wild and three other critical issues across the company's range of hardware and software offerings. October's monthly security update from Microsoft includes fixes for 117 CVEs, the most in...

CVE-2024-43583

Winlogon Elevation of Privilege Vulnerability...

CVE-2024-43583

Winlogon Elevation of Privilege Vulnerability...

CVE-2024-43583 Winlogon Elevation of Privilege Vulnerability

...

CVE-2024-43583 Winlogon Elevation of Privilege Vulnerability

...

CVE-2024-43583

CVE-2024-43583 is a Winlogon elevation of privilege vulnerability. Connected PoC details show an attacker with low local privileges can escalate to SYSTEM by abusing the Image File Execution Options (IFEO) registry hijack to replace a legitimate system process with a malicious payload. Affected W...

Winlogon Elevation of Privilege Vulnerability

...

CVE-2024-43583: Execution with Unnecessary Privileges

Winlogon Elevation of Privilege Vulnerability...

PT-2024-6925 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Winlogon program of Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: At the moment,...