Bobby Gould

An incorrect permission assignment within the product installer allows local attackers to escalate privileges. An attacker who can execute low-privileged code on the target system can leverage incorrect permissions on a specific folder to execute arbitrary code in the context of SYSTEM.

An authentication bypass issue exists within the 'viewclient' webpage due to improper validation of user-supplied data. This allows remote attackers to inject arbitrary scripts, provided the target user visits a malicious page or opens a malicious file. This flaw can be combined with other issues to execute arbitrary code in the context of SYSTEM.

Improper authorization checks when accessing a resource could allow an unauthenticated, remote attacker to view sensitive information on an affected device. By sending crafted traffic, an attacker could gain access to sensitive data, including hashed credentials, which may be utilized in subsequent attacks.

A flaw in the `downloadAttachment()` method allows remote attackers to execute arbitrary scripts on affected installations. This occurs due to insufficient validation of user-supplied data, enabling script injection in the context of the current user. Exploitation requires user interaction, such as visiting a malicious page or opening a malicious file.

The issue is an XML External Entity (XXE) processing flaw within the licensing feature of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC). This flaw allows an authenticated attacker with administrative privileges to upload a malicious file, potentially enabling them to read arbitrary files from the underlying operating system. This could expose sensitive data, including credentials and configurations. A public Proof-of-Concept (PoC) exploit code is available, increasing the risk of exploitation. The vulnerability is due to improper parsing of XML processed by the web-based management interface. There have been no reported real-world exploits at this time. The **API endpoints** involved are not explicitly mentioned. The vulnerability involves the processing of XML files, and the attacker can upload a malicious file. The vulnerable component is the XML parser used in the licensing feature.

A vulnerability exists in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input. This allows an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The vulnerability is actively exploited and a complete exploit chain has been published. The API abuse of this vulnerability was observed in the CoinDCX breach. The vulnerability allows attackers to send crafted API requests to execute commands without requiring valid credentials.

The issue is related to a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This can be exploited by an attacker to execute code in the context of the current process by manipulating users into visiting a malicious page or file.

The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This allows an attacker to manipulate an insider to visit a malicious page or file, potentially leading to the execution of code in the context of the current process. The vulnerability poses a serious cybersecurity threat due to the possibility of remote code execution.

The issue is related to a lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. This allows an attacker to manipulate users into visiting a malicious page or file, potentially executing code in the context of the current process.

The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This allows an attacker to manipulate users into visiting a malicious page or file, which can lead to the execution of code in the context of the current process. The vulnerability enables remote attackers to execute arbitrary code on affected installations.

The issue is related to the lack of proper initialization of memory prior to accessing it in Delta Electronics CNCSoft-G2. An attacker can manipulate users into visiting a malicious page or file, which can leverage this issue to execute code in the context of the current process.

The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This can be exploited if a target visits a malicious page or opens a malicious file, allowing an attacker to execute code in the context of the current process. The vulnerability is related to the DPAX file parsing and can lead to remote code execution.

The issue is related to a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This can be leveraged by an attacker to execute code in the context of the current process if a target visits a malicious page or opens a malicious file. The vulnerability is related to DPAX file parsing and can lead to remote code execution.

The issue is related to a lack of proper validation of user-supplied data, which can result in a memory corruption condition. This can be exploited if a target visits a malicious page or opens a malicious file, allowing an attacker to execute code in the context of the current process.

The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. This can be exploited if a target visits a malicious page or opens a malicious file, allowing an attacker to execute code in the context of the current process.

This issue allows network-adjacent attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is not required to exploit this issue. The specific flaw exists within the update functionality, resulting from the lack of proper validation of the certificate presented by the server. An attacker can leverage this issue to execute code in the context of the current user.