Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-25168PUBLISHED: 2023-02-09
Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with `GHSA-p8r3-83r8-jwj5` to overwrite files on the host system. In order to use this exploit, an attacker must have an exis...
CVE-2023-0249PUBLISHED: 2023-02-08Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.
CVE-2023-0250PUBLISHED: 2023-02-08Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code.
CVE-2023-0251PUBLISHED: 2023-02-08Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to a buffer overflow through improper restrictions of operations within memory, which could allow an attacker to remotely execute arbitrary code.
CVE-2022-38777PUBLISHED: 2023-02-08An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account.
User Rank: Apprentice
1/22/2014 | 8:47:46 PM
I don't know if we would know by now. The criminals could be waiting for a future opportunity. Right now this is highly publicized. If I had millions of valid cards, I'd would think using them in an "Office Space" manner (Superman 2, Richard Pryor stealing fractional pennies) would be lucrative and potentially repeatable for a long duration. Better to stay below the radar by adding a $5.13 charge from Starbuks (pun intended) to millions of accounts...