17 matches found
EUVD-2020-18680
Malware in sbrugna...
CVE-2017-12572
Persistent Cross Site Scripting XSS exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x before 6.3.9 and Splunk Light before 6.5.2, with exploitation requiring administrative access, aka SPL-134104...
CVE-2024-12572 Hello in All Languages <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Hello In All Languages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious...
CVE-2024-12572
CVE-2024-12572 affects the Hello In All Languages WordPress plugin (versions up to and including 1.0.6). The vulnerability is Cross-Site Request Forgery due to missing or incorrect nonce validation on a function, enabling unauthenticated attackers to update plugin settings and inject malicious sc...
CVE-2024-12572 Hello in All Languages <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Hello In All Languages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious...
CVE-2020-26050
SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to SYSTEM via a crafted openssl configuration file. This issue is similar to CVE-2019-12572...
CVE-2019-12572
CVE-2019-12572 affects London Trust Media Private Internet Access (PIA) VPN Client for Windows 1.0.2 (build 02363). On startup, pia-service.exe loads libeay32.dll which seeks C:\etc\ssl\openssl.cnf; a low-privilege user can create that path and a malicious openssl.cnf to load a forged OpenSSL eng...
CVE-2018-12572
creationtimestamp| type| source ---|---|--- 2019-03-21 19:26:46+00:00| seen| https://t.me/cibsecurity/3267...
CVE-2018-12572
Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping AvastUI.exe application memory and parsing the data...
CVE-2018-12572
Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping AvastUI.exe application memory and parsing the data...
CVE-2018-12572
CVE-2018-12572 affects Avast Free Antivirus prior to 19.1.2360. The vulnerability is that credentials are stored in memory during login and can be obtained by a local attacker by dumping AvastUI.exe memory, enabling disclosure of sensitive data. Connected sources confirm public demonstrations/exp...
Avast Anti-Virus 19.1.2360 - Local Credentials Disclosure
Avast Anti-Virus 19.1.2360 - Local Credentials Disclosure Exploit Title: Avast Anti-Virus Local Credentials Disclosure 19.1.2360 Date: 01/18/2019 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Version: before 19.1.2360 build 19.1.4142.0 Tested on: Windows 10 x64 CVE: CVE-2018-12572...
Avast Anti-Virus < 19.1.2360 - Local Credentials Disclosure Exploit
Exploit for windows platform in category local exploits Exploit Title: Avast Anti-Virus Local Credentials Disclosure 19.1.2360 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Version: before 19.1.2360 build 19.1.4142.0 Tested on: Windows 10 x64 CVE: CVE-2018-12572 Based on LiquidWorm'...
Avast Anti-Virus < 19.1.2360 - Local Credentials Disclosure
Exploit Title: Avast Anti-Virus Local Credentials Disclosure 19.1.2360 Date: 01/18/2019 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Version: before 19.1.2360 build 19.1.4142.0 Tested on: Windows 10 x64 CVE: CVE-2018-12572 Based on LiquidWorm's and Yakir Wizman's proof of concepts...
Avast Anti-Virus Local Credential Disclosure
Exploit Title: Avast Anti-Virus Local Credentials Disclosure 19.1.2360 Date: 01/18/2019 Exploit Author: Nathu Nandwani Website: http://nandtech.co/ Version: before 19.1.2360 build 19.1.4142.0 Tested on: Windows 10 x64 CVE: CVE-2018-12572 Based on LiquidWorm's and Yakir Wizman's proof of concepts...