Beenu Arora

يسمح فقدان المصادقة للمهاجمين غير المصرح لهم بالاستعلام عن خدمة الإثراء من خلال مسارات إعادة كتابة وحدة تحكم Next.js. من خلال إرسال طلبات إلى نقاط النهاية '/api/v1/enrichment/lookup' أو '/api/v1/enrichment/bulk'، يمكن للمهاجمين استرداد نتائج استخبارات التهديدات. بالإضافة إلى ذلك، يؤدي تعيين المتغير `force` إلى true إلى استهلاك حصص واجهة برمجة تطبيقات المزود التجاري.

The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This is achieved via a Trojan horse imm.dll located in the same folder as a .grp file.

The issue allows local users to gain privileges via a Trojan horse `fveapi.dll` file in the current working directory. A remote code execution vulnerability exists in the way that the Microsoft Windows Backup Manager handles the loading of DLL files. An attacker who successfully exploited this issue could take complete control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows local users to gain privileges via a Trojan horse `mso.dll` or `GroovePerfmon.dll` file in the current working directory. This can be demonstrated by a directory that contains a Groove vCard (.vcg) or Groove Tool Archive (.gta) file.

The issue allows local users to gain privileges via a Trojan horse `mfc71enu.dll` file in the current working directory. This can be demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file. A remote code execution vulnerability exists in the way that Microsoft Visio handles the loading of DLL files, which could allow an attacker to take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse `mfc71enu.dll` that is located in the same folder as a .tmx file.

Name of the Vulnerable Software and Affected Versions: Harlandscripts Pro Traffic One (affected versions not specified) Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `trg` parameter in the "mypage.php" file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the index.php file when magic quotes gpc is disabled. This is achieved by using a .. (dot dot) in the `c` parameter.

A buffer overflow issue exists in the SQLVDIRLib.SQLVDirControl ActiveX control, which can be exploited by remote attackers to cause a denial of service or possibly execute arbitrary code. This is achieved by providing a long URL in the second argument to the `Connect` method. However, in many environments, this issue may not be considered a vulnerability due to the control not being marked as safe for scripting and default Internet Explorer settings preventing its execution.