EUVD-2023-34662

Malicious code in bioql PyPI...

CVE-2025-51726

CyberGhostVPNSetup.exe Windows installer is signed using the weak cryptographic hash algorithm SHA-1, which is vulnerable to collision attacks. This allows a malicious actor to craft a fake installer with a forged SHA-1 certificate that may still be accepted by Windows signature verification...

CyberGhostVPN 安全漏洞

CyberGhostVPN is a highly optimized VPN server from CyberGhostVPN Romania. CyberGhostVPN suffers from a security vulnerability that stems from the use of weak cryptographic hash algorithm SHA-1 signatures and the lack of high entropy ASLR, which could lead to a supply chain attack or elevation of...

CVE-2024-26330

An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it...

CVE-2023-30237

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

CVE-2024-26330

An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it...

CVE-2024-26330

An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it...

CyberGhostVPN Security Breach

CyberGhostVPN is a highly optimized VPN server from CyberGhostVPN Romania. A security vulnerability exists in CyberGhostVPN version 8.4.3.12823, which stems from a process that remains open after logging out, allowing an attacker to obtain user credentials by dumping the process memory and parsin...

PT-2024-21354 · Kape · Cyberghostvpn

Name of the Vulnerable Software and Affected Versions: Kape CyberGhostVPN version 8.4.3.12823 Description: An issue was discovered where user credentials remain in memory after a successful logout, while the process is still open. These credentials can be obtained by dumping the process memory an...

CVE-2024-26330

An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it...

CVE-2024-26330

A security vulnerability exists in Kape CyberGhostVPN version 8.4.3.12823 on Windows. The flaw allows user credentials to remain in memory even after a successful logout if the process remains open. An attacker can obtain these credentials by dumping and parsing the process memory . As a temporar...

CVE-2024-26330: Insufficiently Protected Credentials

An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows. After a successful logout, user credentials remain in memory while the process is still open, and can be obtained by dumping the process memory and parsing it...

CVE-2023-30237

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

CVE-2023-30237

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

Design/Logic Flaw

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

CVE-2023-30237

CVE-2023-30237 affects CyberGhostVPN Windows Client releases before 8.3.10.10015. The vendor component Dashboard.exe is implicated in a DLL injection/elevation-of-privilege scenario via a privileged Windows service communication channel (named pipe MachineNameCyberGhost8Service). Public details d...

CVE-2023-30237: Uncontrolled Search Path Element

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

CVE-2023-30237

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

CyberGhostVPN 代码问题漏洞

CyberGhostVPN is a highly optimized VPN server from CyberGhostVPN Romania. A security vulnerability exists in CyberGhostVPN Windows Client versions prior to v8.3.10.10015, which was discovered to contain a DLL injection vulnerability via the component Dashboard.exe...

PT-2023-22597 · Cyberghost · Cyberghostvpn Windows Client

Name of the Vulnerable Software and Affected Versions: CyberGhostVPN Windows Client versions prior to 8.3.10.10015 Description: A DLL injection issue was found in the Dashboard.exe component of the CyberGhostVPN Windows Client. Recommendations: For versions prior to 8.3.10.10015, update to versio...