Lucene search
+L

1074 matches found

vulnersOsv
vulnersOsv
added 2021/08/13 10:23 a.m.6 views

ai.chronon:online_2.13 (>=0.0.25 <=revert-391-thread-0.0.24), ai.chronon:service_2.13 (>=0.0.86 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +1025 more potentially affected by CVE-2021-38153 via org.apache.kafka:kafka-clients (=2.8.0)

org.apache.kafka:kafka-clients MAVEN version =2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kafka:kafka-clients and may be impacted: - ai.chronon:online2.13 =0.0.25, =0.0.86, =0.1.7, =0.1.7, =0.1.7, =1.6.0-micronaut-2.0, =0.9.0,...

5.9CVSS6.9AI score0.06252EPSS
SaveExploits0
CNVD
CNVD
added 2021/04/23 12:0 a.m.5 views

Avast Premium Security Backlink Vulnerability

Avast Premium Security is an application from the Czech company Avast. It is used for comprehensive scanning of websites for vulnerabilities. Avast Premium Security version 20.8.2429 suffers from a backlink vulnerability, which can be exploited by attackers who can abuse the service to delete...

6.1CVSS6.8AI score0.00261EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/29 9:15 p.m.6 views

CVE-2021-27241

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 Build 20.8.5653.561. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The...

6.1CVSS6.6AI score0.00261EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/29 9:15 p.m.24 views

CVE-2021-27241

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 Build 20.8.5653.561. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The...

6.1CVSS0.00261EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/29 9:15 p.m.22 views

Design/Logic Flaw

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 Build 20.8.5653.561. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The...

3.6CVSS6.3AI score0.00261EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/29 9:15 p.m.3 views

CVE-2021-27241

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 Build 20.8.5653.561. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The...

6.1CVSS6.5AI score0.00261EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/03/29 9:5 p.m.23 views

CVE-2021-27241

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 Build 20.8.5653.561. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The...

6.1CVSS6.5AI score0.00261EPSS
SaveExploits0References1
CVE
CVE
added 2021/03/29 9:5 p.m.60 views

CVE-2021-27241

This CVE-2021-27241 affects Avast Premium Security 20.8.2429 (Build 20.8.5653.561). The flaw exists in the AvastSvc.exe module and is triggered by creating a directory junction, allowing a local attacker to delete arbitrary directories via abusing the service, which can lead to a denial-of-servic...

6.1CVSS6.3AI score0.00261EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/03/29 12:0 a.m.7 views

Avast Premium Security 后置链接漏洞

Avast Premium Security is an application from the Czech company Avast. It is used for comprehensive scanning of websites for vulnerabilities. Avast Premium Security version 20.8.2429 suffers from a backlink vulnerability, which can be exploited by attackers who can abuse the service to delete...

6.1CVSS5.6AI score0.00261EPSS
SaveExploits0References2
Metasploit
Metasploit
added 2021/02/25 5:42 p.m.52 views

Process Herpaderping evasion technique

This module allows you to generate a Windows executable that evades security products such as Windows Defender, Avast, etc. This uses the Process Herpaderping technique to bypass Antivirus detection. This method consists in obscuring the behavior of a running process by modifying the executable o...

7.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/02/24 12:0 a.m.41 views

Avast Premium Security AvastSvc Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.1CVSS4.1AI score0.00261EPSS
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2020/12/04 7:27 p.m.175 views

Metasploit Wrap-Up

The Metasploit team is rolling to the end of the year featuring a week of modules, updates, and our annual CTF. I say rolling in part because here in the US, we’re coming off our week of Thanksgiving, which involves lots of pies, and we’re probably all a bit more spherical than normal! For those ...

7.5CVSS9.9AI score0.9927EPSS
SaveExploits48
Metasploit
Metasploit
added 2020/12/03 5:41 p.m.297 views

Avast AV Memory Dumping Utility

This module leverages an Avast Anti-Virus memory dump utility that is shipped by default with Avast Anti-Virus Home software suite. Module Options msf use post/windows/gather/avastmemorydump msf postavastmemorydump show actions ...actions... msf postavastmemorydump set ACTION msf...

7.1AI score
SaveExploits0
ThreatPost
ThreatPost
added 2020/11/11 5:47 p.m.43 views

Minecraft Apps on Google Play Fleece Players Out of Big Money

Fans of the popular Minecraft video game are in the crosshairs of cybercriminals, who have loaded up Google Play with scam apps bent on fleecing players out of cash. According to researchers, the mobile apps for Android fool users into spending hundreds of dollars per month, by offering skins,...

7.3AI score
SaveExploits0References10
The Hacker News
The Hacker News
added 2020/10/27 9:25 a.m.6 views

Google Removes 21 Malicious Android Apps from Play Store

Google has stepped in to remove several Android applications from the official Play Store following the disclosure that the apps in question were found to serve intrusive ads. The findings were reported by the Czech cybersecurity firm Avast on Monday, which said the 21 malicious apps list here we...

5.8AI score
SaveExploits0
The Hacker News
The Hacker News
added 2020/10/27 9:25 a.m.46 views

Google Removes 21 Malicious Android Apps from Play Store

Google has stepped in to remove several Android applications from the official Play Store following the disclosure that the apps in question were found to serve intrusive ads. The findings were reported by the Czech cybersecurity firm Avast on Monday, which said the 21 malicious apps list here we...

0.3AI score
SaveExploits0
HackRead
HackRead
added 2020/09/28 4:26 p.m.29 views

White hat hacker infects smart coffee machine with ransowmare

By Waqas Avast security researcher reverse-engineered an IoT coffee machine to upload ransomware and mine Monero coin. Smart appliances have always remained a risky option for consumers, specifically when it comes to coffee machines. Back in 2015, Pen Test Partners researchers discovered security...

2.9AI score
SaveExploits0
OSV
OSV
added 2020/09/13 8:15 p.m.6 views

CVE-2020-25289

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory which has weak permissions...

5.5CVSS5.9AI score0.00449EPSS
SaveExploits1References1
NVD
NVD
added 2020/09/13 8:15 p.m.17 views

CVE-2020-25289

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory which has weak permissions...

5.5CVSS0.00449EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/09/13 7:35 p.m.35 views

CVE-2020-25289

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory which has weak permissions...

5.5AI score0.00449EPSS
SaveExploits1References1
Rows per page
Query Builder