7878 matches found
CVE-2024-5803: Time-of-check Time-of-use (TOCTOU) Race Condition
The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use TOCTOU when self protection is disabled...
PT-2024-37167 · Avast · Avg/Avast Antivirus
Name of the Vulnerable Software and Affected Versions: AVG/Avast Antivirus versions prior to 24.1 Description: The issue allows a local attacker to escalate privileges via a COM hijack in a time-of-check to time-of-use TOCTOU scenario when self-protection is disabled. This occurs in the AVGUI.exe...
Avast Antivirus security vulnerability
Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in versions prior to Avast Antivirus 24.1, which stems from a vulnerability that could allow a local attacker to elevate privileges via COM hijacking during the time of check to time of...
Malicious code in tesgotestpytest-npm-com-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5967a11e2661f28b2148fa4adc68edfa052e545caf5e0b6823865eb4655ab5f The OpenSSF Package Analysis project identified 'tesgotestpytest-npm-com-test' @ 1.999.0 npm as malicious. It is considered malicious because: -...
protobuf-java has potential Denial of Service issue
Summary When parsing unknown fields in the Protobuf Java Lite and Full library, a maliciously crafted message can cause a StackOverflow error and lead to a program crash. Reporter: Alexis Challande, Trail of Bits Ecosystem Security Team Affected versions: This issue affects all versions of both t...
CVE-2024-6510
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...
CVE-2024-6510
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...
CVE-2024-6510 Local privilege escalation vulnerability in AVG Internet Security
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...
CVE-2024-6510 Local privilege escalation vulnerability in AVG Internet Security
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...
CVE-2024-6510
AVG Internet Security for Windows v24 is affected by a local privilege escalation described as COM-Hijacking. The issue enables a local unprivileged user to escalate to SYSTEM through compromised COM interactions. Affected component/behavior and root cause are described in multiple sources (inclu...
CVE-2024-6510: Exposed Dangerous Method or Function
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...
PT-2024-6221 · Avg · Avg Internet Security
Name of the Vulnerable Software and Affected Versions: AVG Internet Security version v24 Description: A local privilege escalation issue in AVG Internet Security allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking. This issue is related to the use of dangerous...
check-6.com Cross Site Scripting vulnerability OBB-3959984
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GO-2022-0360 Ambiguous OCI manifest parsing in github.com/containerd/containerd
Ambiguous OCI manifest parsing in github.com/containerd/containerd...
Styx Stealer Creator's OPSEC Fail Leaks Client List and Profit Details
In what's a case of an operational security OPSEC lapse, the operator behind a new information stealer called Styx Stealer leaked data from their own computer, including details related to the clients, profit information, nicknames, phone numbers, and email addresses. Styx Stealer, a derivative o...
CKEditor security vulnerability
CKEditor is an open source, web-based text editor. A security vulnerability exists in CKEditor4 version 4.22 and later versions, which stems from a vulnerability that allows an attacker to take control of https://cke4.ckeditor.com域...
leqi99.com Cross Site Scripting vulnerability OBB-3956310
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
do713.com Cross Site Scripting vulnerability OBB-3954839
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Google Patches New Android Kernel Vulnerability Exploited in the Wild
Google has addressed a high-severity security flaw impacting the Android kernel that it said has been actively exploited in the wild. The vulnerability, tracked as CVE-2024-36971, has been described as a case of remote code execution impacting the kernel. "There are indications that CVE-2024-3697...
CVE-2024-34343
creationtimestamp| type| source ---|---|--- 2024-08-05 17:00:26+00:00| published-proof-of-concept| https://github.com/nuxt/nuxt/security/advisories/GHSA-vf6r-87q4-2vjf 2024-08-05 23:56:54+00:00| seen| https://t.me/cvedetector/2496 2025-09-12 15:01:41+00:00| seen|...