Beenu Arora

A ausência de autenticação permite que atacantes não autenticados consultem o serviço de enriquecimento por meio de rotas de reescrita do console Next.js. Ao enviar solicitações para os endpoints '/api/v1/enrichment/lookup' ou '/api/v1/enrichment/bulk', os atacantes podem recuperar resultados de inteligência de ameaças. Além disso, definir a variável `force` como true permite o consumo de cotas de API de provedores comerciais.

The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This is achieved via a Trojan horse imm.dll located in the same folder as a .grp file.

The issue allows local users to gain privileges via a Trojan horse `fveapi.dll` file in the current working directory. A remote code execution vulnerability exists in the way that the Microsoft Windows Backup Manager handles the loading of DLL files. An attacker who successfully exploited this issue could take complete control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows local users to gain privileges via a Trojan horse `mso.dll` or `GroovePerfmon.dll` file in the current working directory. This can be demonstrated by a directory that contains a Groove vCard (.vcg) or Groove Tool Archive (.gta) file.

The issue allows local users to gain privileges via a Trojan horse `mfc71enu.dll` file in the current working directory. This can be demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file. A remote code execution vulnerability exists in the way that Microsoft Visio handles the loading of DLL files, which could allow an attacker to take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse `mfc71enu.dll` that is located in the same folder as a .tmx file.

Name of the Vulnerable Software and Affected Versions: Harlandscripts Pro Traffic One (affected versions not specified) Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `trg` parameter in the "mypage.php" file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the index.php file when magic quotes gpc is disabled. This is achieved by using a .. (dot dot) in the `c` parameter.

A buffer overflow issue exists in the SQLVDIRLib.SQLVDirControl ActiveX control, which can be exploited by remote attackers to cause a denial of service or possibly execute arbitrary code. This is achieved by providing a long URL in the second argument to the `Connect` method. However, in many environments, this issue may not be considered a vulnerability due to the control not being marked as safe for scripting and default Internet Explorer settings preventing its execution.