4408 matches found
Trojan.Win32.TScash.c Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/9d18d318e017b513b9c6cd193ccdc6ff.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.TScash.c Vulnerability: Insecure Permissions Description: The malware writes a PE file...
ALPINE-CVE-2022-24765
Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...
UBUNTU-CVE-2022-24765
Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...
Backdoor.Win32.Bifrose.uw Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/9e4f942c60044feef0fb48538ffac383.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Bifrose.uw Vulnerability: Insecure Permissions Description: The malware writes a ".EX...
CVE-2022-25154
A DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could allow a local attacker to escalate privileges. An attacker must already have user privileges on Windows 7, 10, or 11 to exploit this vulnerability...
Drive state on SDX shows as degraded
Drive state is observed as clean, degraded under SDX RAID logical drives Checking the physical drive status shows the drive in in the slot state as Not Present...
North Korean state-sponsored threat actor Lazarus Group exploiting Chrome Zero-day vulnerability
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here For more than a month before a fix was available, North Korean state hackers known as Lazarus group exploited a zero-day, remote code execution vulnerability CVE-2022-0609 in Google Chromes web browser. The attack mainly targe...
CVE-2021-46390
An access control issue in the authentication module of LexarF35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service DoS. An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information...
CVE-2021-46390
An access control issue in the authentication module of LexarF35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service DoS. An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information...
Design/Logic Flaw
An access control issue in the authentication module of LexarF35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service DoS. An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information...
CVE-2021-46390
CVE-2021-46390 – Lexar_F35 v1.0.34 exhibits an access-control flaw in the authentication module of a Lexar USB flash drive. The vulnerability allows a local attacker with physical access to bypass password authentication by analyzing and manipulating the returned password verification/comparison ...
Lexar_F35 授权问题漏洞
LexarF35 is a USB flash drive from Lexar Corporation. A security vulnerability exists in LexarF35 version 1.0.34, which originates from an access control issue in the authentication module. The vulnerability can be exploited by an attacker to access sensitive data and cause a denial of service Do...
Siemens SIMATIC Industrial Products Operation On a Resource After Expiration or Release (CVE-2021-37185)
A vulnerability has been identified in SIMATIC Drive Controller family All versions = V2.9.2 = V21.9 = V4.5.0 = V2.9.2 = V21.9 = V4.0 V4.0 SP1, SIPLUS TIM 1531 IRC All versions V2.3.6, TIM 1531 IRC All versions V2.3.6. An unauthenticated attacker could cause a denial- of-service condition in a PL...
Microsoft Windows Redirected Drive Buffering Subsystem Disclosure
The vulnerability of the Redirected Drive Buffering Subsystem in the Microsoft Windows operating system is related to information disclosure. Exploiting this vulnerability can allow attackers to disclose protected information...
BuilderOrcus Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/cc3670f1b3e60e00b43c86d787563a44.txt Contact: [email protected] Media: twitter.com/malvuln Threat: BuilderOrcus Orcus.Administration-cracked.exe Vulnerability: Insecure Permissions Description: When...
Windows Print Spooler Privilege Escalation
The vulnerability of the Redirected Drive Buffering System rdbss.sys driver in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft Windows Redirected Drive Buffering Subsystem Disclosure
The vulnerability of the Redirected Drive Buffering Subsystem in the Microsoft Windows operating system is related to information disclosure. Exploiting this vulnerability can allow attackers to disclose protected information...
Microsoft Windows Redirected Drive Buffering Subsystem Disclosure
The vulnerability of the Redirected Drive Buffering Subsystem in the Microsoft Windows operating system is related to information disclosure. Exploiting this vulnerability can allow attackers to disclose protected information...
WordPress Integrate Google Drive – Complete Google Drive Cloud Solution For WordPress plugin < 1.1.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Integrate Google Drive – Complete Google Drive Cloud Solution For WordPress plugin versions 1.1.0. Solution Update the WordPress Integrate Google Drive – Complete Google Drive Cloud Solution For...
WordPress Integrate Google Drive – Complete Google Drive Cloud Solution For WordPress plugin < 1.1.0 - Sensitive Information Disclosure vulnerability
Sensitive Information Disclosure vulnerability discovered in WordPress Integrate Google Drive – Complete Google Drive Cloud Solution For WordPress plugin versions 1.1.0. Solution Update the WordPress Integrate Google Drive – Complete Google Drive Cloud Solution For WordPress plugin to the latest...