EUVD-2021-22853

Malware in sbrugna...

EUVD-2021-22852

Malware in sbrugna...

CVE-2021-36233

The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows by design an authenticated attacker to read arbitrary files from the filesystem by specifying the file path...

Hardcoded credentials

Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors...

CVE-2021-36233

CVE-2021-36233 affects MIK.starlight prior to any explicit patch details in the provided docs, where the function AdminGetFirstFileContentByFilePath (version 7.9.5.24363) allows an authenticated attacker to read arbitrary filesystem files by supplying a file path. The root cause is an input handl...