Design/Logic Flaw

A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An...

CVE-2023-1189 WiseCleaner Wise Folder Hider IoControlCode WiseFs64.sys 0x222410 denial of service

A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An...

CVE-2023-1189 WiseCleaner Wise Folder Hider IoControlCode WiseFs64.sys 0x222410 denial of service

A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An...

CVE-2023-1189

CVE-2023-1189 affects WiseCleaner Wise Folder Hider (v4.4.3.202) — the vulnerability lies in the WiseFs64.sys IoControlCode Handler, specifically within functions 0x222400/0x222404/0x222410. The manipulation leads to a denial of service and requires a local attack vector. A PoC/exploit has been p...

CVE-2023-1189: Improper Resource Shutdown or Release

A vulnerability was found in WiseCleaner Wise Folder Hider 4.4.3.202. It has been declared as problematic. Affected by this vulnerability is the function 0x222400/0x222404/0x222410 in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An...

PT-2023-16810 · Wisecleaner · Wise Folder Hider +1

Name of the Vulnerable Software and Affected Versions: WiseCleaner Wise Folder Hider version 4.4.3.202 Description: A vulnerability was found in the WiseCleaner Wise Folder Hider software, affecting the function in the library WiseFs64.sys of the component IoControlCode Handler. The manipulation...

The vulnerability of the Advantech WISE-PaaS/OTA Server lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech WISE-PaaS/OTA Server is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor to increase their privileges by using a specially created file...

CVE-2022-23099

OX App Suite through 7.10.6 allows XSS by forcing block-wise read...

CVE-2022-23099

OX App Suite through 7.10.6 allows XSS by forcing block-wise read...

Cross site scripting

OX App Suite through 7.10.6 allows XSS by forcing block-wise read...

CVE-2022-23099

OX App Suite through 7.10.6 allows XSS by forcing block-wise read...

PT-2022-15841 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions 7.10.6 and earlier Description: The issue allows for cross-site scripting XSS by forcing block-wise read. This can potentially lead to malicious script execution in the context of the affected application. Recommendation...

CVE-2022-23099: Improper Neutralization of Input During Web Page Generation

OX App Suite through 7.10.6 allows XSS by forcing block-wise read...

CVE-2022-34586

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/studentgradewise.php...

drinkwisecompany.com Cross Site Scripting vulnerability OBB-2663531

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in wise_lena_bot_server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d497c45152e7ca1cf17203c6f3d594ab5034b0214fabeacd6a950b065d4c6667 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Google Project Zero Detects a Record Number of Zero-Day Exploits in 2021

Google Project Zero called 2021 a "record year for in-the-wild 0-days," as 58 security vulnerabilities were detected and disclosed during the course of the year. The development marks more than a two-fold jump from the previous maximum when 28 0-day exploits were tracked in 2015. In contrast, onl...

CVE-2021-24952

The Conversios.io WordPress plugin before 4.6.2 does not sanitise, validate and escape the syncprogressivedata parameter for the tvcajaxproductsyncbantchwise AJAX action before using it in a SQL statement, allowing any authenticated user to perform SQL injection attacks...

PT-2022-9525

Name of the Vulnerable Software and Affected Versions Conversios.io WordPress plugin versions prior to 4.6.2 Description The issue allows any authenticated user to perform SQL injection attacks due to the lack of sanitization, validation, and escaping of the sync progressive data parameter for th...

CVE-2021-40397

A privilege escalation vulnerability exists in the installation of Advantech WISE-PaaS/OTA Server 3.0.9. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger this vulnerability...