CVE-2021-26557

CVE-2021-26557 affects Octopus Tentacle when installed to a custom folder where folder ACLs are not set correctly. This misconfiguration can allow an unprivileged user to use DLL side-loading to gain privileged access, resulting in a local privilege escalation. The NVD data cites local attack vec...

CVE-2021-26557

When Octopus Tentacle is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access...

CVE-2021-26556

When Octopus Server is installed using a custom folder location, folder ACLs are not set correctly and could lead to an unprivileged user using DLL side-loading to gain privileged access...

CVE-2021-26556

CVE-2021-26556 affects Octopus Server when installed in a custom folder location. The root cause is improper ACL configuration on the installation folder, enabling a DLL side-loading path for an unprivileged user to escalate to privileged access. The connected sources confirm the presence of a lo...

Exploit for CVE-2021-1675

CVE-2021-1675-PrintNightmare Working PowerShell POC Powershel...

Security Bulletin: The Community Edition of IBM ILOG CPLEX Optimization Studio is affected by a vulnerability in libcurl (CVE-2021-22945)

Summary The Community Edition of IBM ILOG CPLEX Optimization Studio on Windows platform only has addressed the following vulnerability: libcurl is vulnerable to a denial of service. Vulnerability Details CVEID: CVE-2021-22945 DESCRIPTION: cURL libcurl is vulnerable to a denial of service, caused ...

Security Bulletin: The Community Edition of IBM ILOG CPLEX Optimization Studio is affected by a vulnerability in libcurl (CVE-2021-22925)

Summary The Community Edition of IBM ILOG CPLEX Optimization Studio on Windows platform only has addressed the following vulnerability: libcurl is vulnerable to a remote attack. Vulnerability Details CVEID: CVE-2021-22925 DESCRIPTION: cURL libcurl could allow a remote attacker to obtain sensitive...

Exploit for Path Traversal in Microsoft

CVE-2021-40444 Usage Ensure to run setup.sh first as yo...

CVE-2021-38106

UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue...

CVE-2021-38110

Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issu...

Design/Logic Flaw

UAX200.dll in Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to access unauthorized system memory in the context of the current user. Exploitation of this issue...

Design/Logic Flaw

Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issu...

CVE-2021-38110

Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200 is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issu...

CVE-2021-38106

Corel Presentations 2020 20.0.0.200 is affected by an Out-of-bounds Read in UAX200.dll when parsing a crafted PPT file. An unauthenticated attacker could access memory in the context of the current user, with exploitation requiring user interaction (victim opens a malicious file). The condition i...

Dell SupportAssist < 3.10 Multiple Vulnerabilities (DSA-2021-163)

According to its self-reported version number, the version of Dell SupportAssist Client Consumer is prior to 3.10. It is, therefore, affected by multiple vulnerabilities. - An arbitrary file deletion vulnerability exists due to how Dell SupportAssist handles symbolic links and NTFS junction point...

GhostEmperor: From ProxyLogon to kernel mode

Download GhostEmperors technical details PDF While investigating a recent rise of attacks against Exchange servers, we noticed a recurring cluster of activity that appeared in several distinct compromised networks. This cluster stood out for its usage of a formerly unknown Windows kernel mode...

Corel PhotoPaint Standard 2020 缓冲区错误漏洞

Corel PhotoPaint Standard 2020 is a commercial photo editing and pixel-based design program for Corel from Corel Digital Technology Corel Canada. A buffer error vulnerability in CDRRip.dll in Corel PhotoPaint Standard 2020 22.0.0.474 can be exploited by an unauthenticated attacker to execute...

Corel WordPerfect 2020 缓冲区错误漏洞

Corel WordPerfect 2020 is a commercial word processing tool from Corel, a Canadian company of Corel Digital Technology Corel. A buffer error vulnerability exists in Word97Import200.dll in Corel WordPerfect 2020 20.0.0.200, which can be exploited by an unauthenticated attacker to gain unauthorized...

CVE-2021-35982

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Uncontrolled Search Path Element vulnerability. A local attacker with non-administrative privileges can plant a malicious DLL to achieve arbitrary code execution in...

CVE-2021-35982

Acrobat Reader DC versions 2021.005.20060 and earlier, 2020.004.30006 and earlier and 2017.011.30199 and earlier are affected by an Uncontrolled Search Path Element vulnerability. A local attacker with non-administrative privileges can plant a malicious DLL to achieve arbitrary code execution in...