GOG Galaxy Local Elevation of Privilege Vulnerability

GOG Galaxy is a game client program. The program is used to install, launch and update games. A security vulnerability exists in the file system permissions of the installation path in GOG Galaxy version 1.2.45.61. An attacker can exploit this vulnerability by overwriting an executable file to...

AccuPOS Insecure Privilege Vulnerability

AccuPOS is a retail system from the American company AccuPOS. The system features order management, payment management and inventory management. An insecure privilege vulnerability exists in AccuPOS version 2017.8, which stems from the program assigning insecure 'Authenticated Users: Modify'...