赛克艾威-漏洞预警

SecEvery - Vulnerability Warning

Zabbix ping脚本 存在命令注入漏洞

北京赛克艾威科技有限公司

2024-08-09

暂无

Progress Software WhatsUp Gold命令执行漏洞(CVE-2024-4884)

北京赛克艾威科技有限公司

2024-06-05

在2023.1.3之前发布的WhatsUp Gold版本中,Progress WhatsUpGold存在一个未认证的远程代码执行漏洞。Apm.UI.Areas.APM.Controllers.CommunityController允许以iisapppool\nmconsole权限执行命令。

Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

北京赛克艾威科技有限公司

2024-08-13

Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.

Microsoft Windows Kernel Privilege Escalation Vulnerability

北京赛克艾威科技有限公司

2024-08-13

Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition.

Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

北京赛克艾威科技有限公司

2024-08-13

Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.