Beenu Arora

Missing authentication allows unauthenticated attackers to query the enrichment service via Next.js console rewrite routes. By sending requests to the endpoints '/api/v1/enrichment/lookup' or '/api/v1/enrichment/bulk', attackers can retrieve threat-intelligence results. Additionally, setting the `force` variable to true allows the consumption of commercial provider API quotas.

The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This is achieved via a Trojan horse imm.dll located in the same folder as a .grp file.

The issue allows local users to gain privileges via a Trojan horse `fveapi.dll` file in the current working directory. A remote code execution vulnerability exists in the way that the Microsoft Windows Backup Manager handles the loading of DLL files. An attacker who successfully exploited this issue could take complete control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows local users to gain privileges via a Trojan horse `mso.dll` or `GroovePerfmon.dll` file in the current working directory. This can be demonstrated by a directory that contains a Groove vCard (.vcg) or Groove Tool Archive (.gta) file.

The issue allows local users to gain privileges via a Trojan horse `mfc71enu.dll` file in the current working directory. This can be demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file. A remote code execution vulnerability exists in the way that Microsoft Visio handles the loading of DLL files, which could allow an attacker to take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse `mfc71enu.dll` that is located in the same folder as a .tmx file.

Name of the Vulnerable Software and Affected Versions: Harlandscripts Pro Traffic One (affected versions not specified) Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `trg` parameter in the "mypage.php" file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the index.php file when magic quotes gpc is disabled. This is achieved by using a .. (dot dot) in the `c` parameter.

A buffer overflow issue exists in the SQLVDIRLib.SQLVDirControl ActiveX control, which can be exploited by remote attackers to cause a denial of service or possibly execute arbitrary code. This is achieved by providing a long URL in the second argument to the `Connect` method. However, in many environments, this issue may not be considered a vulnerability due to the control not being marked as safe for scripting and default Internet Explorer settings preventing its execution.