mindmanager-poc

mindmanager-poc 受影响应用程序：MindManager23setup.exe 平台：Windows 问题：通过 MSI 安装程序“修复”模式实现本地权限提升（EXE 劫持竞争条件） 发现并报告：Pawel Karwowski 和 Julian Horoszkiewicz（Eviden Red Team） 建议的缓解措施： https://learn.microsoft.com/en-us/windows/win32/msi/disablemsi 公开披露的理由： 长期无限期搁置此问题，最终只会让威胁行为者受益（该问题极易被发现），同时让用户和管理员蒙在鼓里，对风险一无所知...

CVE-2026-44609

CVE-2026-44609 affects Acronis DeviceLock DLP for Windows prior to build 9.0.15051.93227. The vulnerability is an EXE hijacking issue that enables local privilege escalation. Exploitation details are not provided in the supplied documents beyond the affected product and build, and there is no inf...

SUSE CVE-2022-24826

On Windows, if Git LFS operates on a malicious repository with a ..exe file as well as a file named git.exe, and git.exe is not found in PATH, the ..exe program will be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems. Similarly, if the malicious...

DeepService SSL VPN suffers from a local power lifting vulnerability

EasyConnect enables you to use all the systems and applications on your company's intranet outside the office. The EasyConnect PC Client version 7.1.0.4 has an exe hijacking vulnerability due to a space in the binary path Program Files and the entire path is not enclosed in double quotes, which...