Veridium SprintWork 安全漏洞

Veridium SprintWork is a web blocking software developed by Veridium Corporation. Version 2.3.1 of Veridium SprintWork contains a security vulnerability. This vulnerability stems from insecure permissions for files, services, and folders on Windows systems, which may lead to an increase in local...

CVE-2020-37160 SprintWork 2.3.1 - Local Privilege Escalation

SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files and weak service configurations to create a new administrative user and gain...

PT-2026-6826

Name of the Vulnerable Software and Affected Versions SprintWork version 2.3.1 Description SprintWork 2.3.1 contains multiple local privilege escalation issues due to insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files a...

CVE-2020-37129

Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can replace the service executable with a malicious file during system restart to gain SYSTEM-level privileges by exploiting unrestricted file...

CVE-2025-60865

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component...

Drupal Role Delegation 安全漏洞

Drupal Role Delegation is a permissions management module developed by the Drupal company. Versions of Drupal Role Delegation prior to 1.5.0 contained security vulnerabilities. These vulnerabilities were due to insecure permission definitions, which could lead to unauthorized permission escalatio...

CVE-2025-60865

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component...

CVE-2025-60865

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component...

CVE-2025-60865

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component...

Avanquest Driver Updater 安全漏洞

Avanquest Driver Updater is a driver management tool developed by the American company Avanquest. Version 9.1.57803.1174 of Avanquest Driver Updater contains a security vulnerability. This vulnerability stems from insecure permissions, which may allow local attackers to gain elevated privileges...

PT-2026-5928

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component...

EUVD-2025-206729

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component...

CVE-2025-60865

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component...

CVE-2025-60865

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service windows component...

Exploit for CVE-2025-60865

CVE Disclosures | Findings...

UBUNTU-CVE-2026-24413

Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropriate permissions for the %ProgramData%\icinga2\var folder on Windows. This resulted in the its contents - including the private key of the...

EUVD-2026-4959

Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropriate permissions for the %ProgramData%\icinga2\var folder on Windows. This resulted in the its contents - including the private key of the...

CVE-2026-24413 Icinga has insecure permission of %ProgramData%\icinga2\var on Windows

Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropriate permissions for the %ProgramData%\icinga2\var folder on Windows. This resulted in the its contents - including the private key of the...

Exploit for Incorrect Permission Assignment for Critical Resource in Apachefriends Xampp

CVE-2020-11107 – XAMPP Local Privilege Escalation Descript...

PT-2026-5317

Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropriate permissions for the %ProgramData%icinga2var folder on Windows. This resulted in the its contents - including the private key of the...