SecEvery - Vulnerability Warning
2024-06-05
在2023.1.3之前发布的WhatsUp Gold版本中,Progress WhatsUpGold存在一个未认证的远程代码执行漏洞。Apm.UI.Areas.APM.Controllers.CommunityController允许以iisapppool\nmconsole权限执行命令。
2024-08-13
Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.
2024-08-13
Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition.
2024-08-13
Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.