Harkenzo

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

يسمح حل الارتباط غير الصحيح قبل الوصول إلى الملف، والمعروف باسم link following، للمهاجم المصرح له بالكشف عن معلومات محليًا.

The web management interface for Unified Intents' Unified Remote solution does not require authentication, allowing a remote, unauthenticated attacker to change or disable authentication requirements for the Unified Remote protocol. This can be leveraged to run code of the attacker's choosing. The issue is related to an incorrect authorization procedure in the web management interface.