Gain Privileges

IBM PowerSC session fixation | CVE-2023-50936

February 2, 2024

NAME__________IBM PowerSC session fixationPlatforms Affected:IBM PowerSC 1.3 IBM PowerSC 2.0 IBM PowerSC 2.1Risk Level:6.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________IBM PowerSC 1.3, 2.0, and...

VEVA Edge products privilege escalation | CVE-2023-6132

February 2, 2024

NAME__________VEVA Edge products privilege escalationPlatforms Affected:AVEVA Edge productsRisk Level:7.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________VEVA Edge products could allow a remote attacker to gain...

GNU C Library (known as glibc) privilege escalation | CVE-2023-6246

January 31, 2024

NAME__________GNU C Library (known as glibc) privilege escalationPlatforms Affected:GNU glibc 2.37Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________GNU C Library (known as glibc) could...

Microsoft Edge (Chromium-based) privilege escalation | CVE-2024-21388

January 31, 2024

NAME__________Microsoft Edge (Chromium-based) privilege escalationPlatforms Affected:Microsoft Edge (Chromium-based) 120.0.2210.160 Microsoft Edge (Chromium-based) 121.0.2277.83Risk Level:6.5Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Microsoft Edge (Chromium-based) could allow...

European Chemicals Agency IUCLID code execution | CVE-2024-0770

January 24, 2024

NAME__________European Chemicals Agency IUCLID code executionPlatforms Affected:European Chemicals Agency IUCLID 7.10.3Risk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________European Chemicals Agency IUCLID could allow a...

Trend Micro Deep Security privilege escalation | CVE-2023-52337

January 23, 2024

NAME__________Trend Micro Deep Security privilege escalationPlatforms Affected:Trend Micro Deep Security 20.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Trend Micro Deep Security could allow a...

Trend Micro Deep Security privilege escalation | CVE-2023-52338

January 23, 2024

Apple tvOS privilege escalation | CVE-2024-23208

January 23, 2024

NAME__________Apple tvOS privilege escalationPlatforms Affected:Apple tvOS 17.2Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Apple tvOS could allow a local attacker to gain elevated privileges...

Apple tvOS privilege escalation | CVE-2024-23212

January 23, 2024

rpm-software-management Mock privilege escalation | CVE-2023-6395

January 19, 2024

NAME__________rpm-software-management Mock privilege escalationPlatforms Affected:rpm-software-management mockRisk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________rpm-software-management Mock could allow a local authenticated attacker to gain elevated privileges...

GitHub Enterprise Server privilege escalation | CVE-2024-0507

January 19, 2024

NAME__________GitHub Enterprise Server privilege escalationPlatforms Affected:GitHub Enterprise Server 3.8.11 GitHub Enterprise Server 3.9.6 GitHub Enterprise Server 3.10.3 GitHub Enterprise Server...

Trend Micro Apex One and Apex One as a Service privilege escalation | CVE-2023-52090

January 12, 2024

NAME__________Trend Micro Apex One and Apex One as a Service privilege escalationPlatforms Affected:Trend Micro Apex One as a Service Trend...

Trend Micro Apex One and Apex One as a Service privilege escalation | CVE-2023-52091

January 12, 2024

NAME__________Trend Micro Apex One and Apex One as a Service privilege escalationPlatforms Affected:Trend Micro Apex One as a Service Trend...

Trend Micro Apex One and Apex One as a Service privilege escalation | CVE-2023-52092

January 12, 2024

NAME__________Trend Micro Apex One and Apex One as a Service privilege escalationPlatforms Affected:Trend Micro Apex One as a Service Trend...

Cisco ThousandEyes Enterprise Agent Virtual Appliance privilege escalation | CVE-2024-20277

January 11, 2024

NAME__________Cisco ThousandEyes Enterprise Agent Virtual Appliance privilege escalationPlatforms Affected:Cisco ThousandEyes Enterprise AgentRisk Level:6.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Cisco ThousandEyes Enterprise Agent Virtual Appliance...

Cisco EPNM and Prime Infrastructure privilege escalation | CVE-2023-20260

January 11, 2024

NAME__________Cisco EPNM and Prime Infrastructure privilege escalationPlatforms Affected:Cisco Prime Infrastructure Cisco Evolved Programmable Network ManagerRisk Level:6Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Cisco EPNM and...

Microsoft Windows Kernel privilege escalation | CVE-2024-20698

January 10, 2024

NAME__________Microsoft Windows Kernel privilege escalationPlatforms Affected:Microsoft Windows Server 2019 Microsoft Windows 10 1809 for x64-based Systems Microsoft Windows 10 1809...

Microsoft Windows Win32k privilege escalation | CVE-2024-20686

January 10, 2024

NAME__________Microsoft Windows Win32k privilege escalationPlatforms Affected:Microsoft Windows Server (Server Core installation) 2022 23H2Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Microsoft Windows could allow a...

Gain Privileges

IBM PowerSC session fixation | CVE-2023-50936

VEVA Edge products privilege escalation | CVE-2023-6132

GNU C Library (known as glibc) privilege escalation | CVE-2023-6246

Microsoft Edge (Chromium-based) privilege escalation | CVE-2024-21388

European Chemicals Agency IUCLID code execution | CVE-2024-0770

Trend Micro Deep Security privilege escalation | CVE-2023-52337

Trend Micro Deep Security privilege escalation | CVE-2023-52338

Apple tvOS privilege escalation | CVE-2024-23208

Apple tvOS privilege escalation | CVE-2024-23212

rpm-software-management Mock privilege escalation | CVE-2023-6395

GitHub Enterprise Server privilege escalation | CVE-2024-0507

Trend Micro Apex One and Apex One as a Service privilege escalation | CVE-2023-52090

Trend Micro Apex One and Apex One as a Service privilege escalation | CVE-2023-52091

Trend Micro Apex One and Apex One as a Service privilege escalation | CVE-2023-52092

Cisco ThousandEyes Enterprise Agent Virtual Appliance privilege escalation | CVE-2024-20277

Cisco EPNM and Prime Infrastructure privilege escalation | CVE-2023-20260

Microsoft Windows Kernel privilege escalation | CVE-2024-20698

Microsoft Windows Win32k privilege escalation | CVE-2024-20686

Microsoft Windows Group Policy privilege escalation | CVE-2024-20657

Microsoft Windows Virtual Hard Disk privilege escalation | CVE-2024-20658

Microsoft Windows Kernel-Mode Driver privilege escalation | CVE-2024-21309

Microsoft Windows Common Log File System privilege escalation | CVE-2024-20653

Microsoft Windows Cloud Files Mini Filter Driver privilege escalation | CVE-2024-21310

Microsoft Windows Subsystem for Linux privilege escalation | CVE-2024-20681

[APT73] – Ransomware Victim: www[.]fpj[.]com[.]py

[HUNTERS] – Ransomware Victim: Horsa

CVE Alert: CVE-2024-52498

CVE Alert: CVE-2024-52499

CVE Alert: CVE-2024-52501

You may have missed