CVE-2020-3808

Adobe Creative Cloud Desktop (Windows) is affected by CVE-2020-3808: a time‑of‑check to time‑of‑use (TOCTOU) race condition in versions 5.0 and earlier that can lead to arbitrary file deletion. The issue is documented in APSB20-11; a fix is available in 5.1.x (e.g., 5.1.0.407 as referenced by Nes...

CVE-2020-3808: Time-of-check Time-of-use (TOCTOU) Race Condition

Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use toctou race condition vulnerability. Successful exploitation could lead to arbitrary file deletion...

PT-2020-6361

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 5.0 and earlier Description The issue is caused by a time-of-check to time-of-use toctou race condition. Successful exploitation could lead to arbitrary file deletion. This can be exploited by ...

APSB20-11 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released a security update for the Adobe Creative Cloud Desktop Application for Windows. This update addresses a critical vulnerability. Successful exploitation could lead to arbitrary file deletion...

Socat 1.7.3.4 - Heap-Based Overflow (PoC)

Exploit Title: Socat 1.7.3.4 - Heap Based Overflow PoC Date: 2020-02-03 Exploit Author: hieubl from HPT Cyber Security Vendor Homepage: http://www.dest-unreach.org/ Software Link: http://www.dest-unreach.org/socat/ Version: 1.7.3.4 Tested on: Ubuntu 16.04.6 LTS CVE : Heap-Based Overflow due to...

Autodesk Desktop Application code issue vulnerability

Autodesk Desktop Application is a desktop application for downloading, managing, and upgrading Autodesk products from Autodesk, Inc. A code issue vulnerability exists in Autodesk Desktop Application 7.0.16.29 and prior versions, which could be exploited by attackers to The vulnerability can be...

CVE-2019-7365

DLL preloading vulnerability in Autodesk Desktop Application versions 7.0.16.29 and earlier. An attacker may trick a user into downloading a malicious DLL file into the working directory, which may then leverage a DLL preloading vulnerability and execute code on the system...

CVE-2019-7365

DLL preloading vulnerability in Autodesk Desktop Application versions 7.0.16.29 and earlier. An attacker may trick a user into downloading a malicious DLL file into the working directory, which may then leverage a DLL preloading vulnerability and execute code on the system...

CVE-2019-7365

Autodesk Desktop Application (versions ≤ 7.0.16.29) is affected by a DLL preloading vulnerability. The issue arises when an attacker persuades a user to place a malicious DLL in the working directory, enabling DLL preloading to execute code on the application host. Root cause is the DLL search/lo...

PT-2019-18566

Name of the Vulnerable Software and Affected Versions Autodesk Desktop Application versions 7.0.16.29 and earlier Description A DLL preloading issue allows an attacker to potentially execute code on a system by tricking a user into downloading a malicious DLL file into the working directory. This...

CVE-2019-7365: Uncontrolled Search Path Element

DLL preloading vulnerability in Autodesk Desktop Application versions 7.0.16.29 and earlier. An attacker may trick a user into downloading a malicious DLL file into the working directory, which may then leverage a DLL preloading vulnerability and execute code on the system...

CVE-2019-19362

An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. The vendor states that it was later fixed. Upon login, every communication is saved within Windows main memory. When a user logs out or deletes conversation history but does not exit the...

CVE-2019-19362

An issue was discovered in the Chat functionality of the TeamViewer desktop application 14.3.4730 on Windows. The vendor states that it was later fixed. Upon login, every communication is saved within Windows main memory. When a user logs out or deletes conversation history but does not exit the...

CVE-2019-19362

The CVE-2019-19362 issue affects the TeamViewer desktop application for Windows (version 14.3.4730) in its Chat functionality. The root cause is that after login, communications are stored in Windows main memory and are not wiped when the user logs out or deletes history (without exiting the app)...

CVE-2012-1257

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor...

CVE-2019-8236

Creative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass vulnerability. Successful exploitation could lead to Privilege Escalation in the context of the current user...

CVE-2019-8236

Creative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass vulnerability. Successful exploitation could lead to Privilege Escalation in the context of the current user...

CVE-2019-8236

Adobe Creative Cloud Desktop Application version 4.6.1 and earlier is affected by a Security Bypass vulnerability that can lead to privilege escalation in the context of the current user. Affected product/component: Creative Cloud Desktop Application on Windows/macOS ≤ 4.6.1.393. Root cause is a ...

PT-2019-18950

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions prior to 4.6.1 Description The issue allows for security bypass, which could lead to privilege escalation in the context of the current user. Recommendations For versions prior to 4.6.1, update...

CVE-2019-8236: Undefined Security Weakness

Creative Cloud Desktop Application version 4.6.1 and earlier versions have Security Bypass vulnerability. Successful exploitation could lead to Privilege Escalation in the context of the current user...