PT-2024-29947 · Zoom · Zoom Workplace Desktop App +1

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Desktop App for macOS versions prior to 6.1.0 Zoom Meeting SDK for macOS versions prior to 6.1.0 Description: The issue is related to an untrusted search path in the installer for the affected software, which may allow a...

PT-2024-7024 · Microsoft +1 · Windows +2

Name of the Vulnerable Software and Affected Versions: Intel Ethernet Adapter Complete Driver Pack versions affected versions not specified IntelR Ethernet Connection I219-LM affected versions not specified Description: The issue is related to an uncontrolled search path element in the installer...

PT-2024-6975 · Intel · Intel Connectivity Performance Suite

Name of the Vulnerable Software and Affected Versions: Intel Connectivity Performance Suite versions prior to 2.0 Description: The issue is related to incorrect default permissions in the Intel Connectivity Performance Suite software installer. This could allow an authenticated user to potentiall...

MAL-2024-12196 Malicious code in artifact-lab-3-package-2387a34d (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fee5bd32875c77b424ebb9a32f5c20b4dbfa892c17655622ba445be401db32d4 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in juphelper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9bc13ee7427735e24063e780c1b868c131887f9f77c858325e1c81353ee4cd3a Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...

MAL-2024-12296 Malicious code in jupphelp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dcda51f3ac0b82ef824630ce053d4dc42aa2021baf16e476ca83ef8d7f7c1cab Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...

CVE-2024-22121 Zabbix Agent MSI Installer Allows Non-Admin User to Access Change Option via msiexec.exe

A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application...

CVE-2024-22121 Zabbix Agent MSI Installer Allows Non-Admin User to Access Change Option via msiexec.exe

A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application...

CVE-2024-22121

Technical details about CVE-2024-22121 are not publicly provided in the connected documents. Descriptions only state that a non-admin user can modify Zabbix Agent features. Monitor for updates from vendors and advisories.

Red Hat OpenShift Assisted Installer 访问控制错误漏洞

Red Hat OpenShift Assisted Installer is an assisted boot installer from Red Hat USA. An access control error vulnerability exists in Red Hat OpenShift Assisted Installer that stems from the presence of a cross-model authentication bypass vulnerability...

CVE-2024-23460

The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS 4.2...

Zscaler Client Connector 安全漏洞

Zscaler Client Connector is a lightweight agent from Zscaler, Inc. A security vulnerability exists in Zscaler Client Connector versions prior to 4.2, which originates from not verifying the digital signature of the installer, allowing arbitrary code to be executed locally...

August 6, 2024, update for Access 2016 (KB5002589)

None None...

Point B Getscreen 安全漏洞

Point B Getscreen is a browser-based remote desktop software from Point B Corporation. A security vulnerability exists in Point B Getscreen version 2.19.6, which stems from an unknown function in the file getscreen.msi that can lead to the creation of temporary files with insecure permissions...

CVE-2024-31203

A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library packaged with the ThermoscanIP installer allows a local attacker to possibly trigger a Denial-of-Service DoS condition on the target component...

The vulnerability of the MSI-Installer component of the Baramundi Management Agent makes it possible for attackers to increase their privileges.

The vulnerability of the MSI-installer component of the Baramundi Management Agent involves the use of dangerous methods or functions. Exploiting this vulnerability can allow an attacker to increase their privileges...

Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site

The remote access trojan known as Gh0st RAT has been observed being delivered by an "evasive dropper" called Gh0stGambit as part of a drive-by download scheme targeting Chinese-speaking Windows users. These infections stem from a fake website "chrome-web.com" serving malicious installer packages...

PT-2024-38196 · Avg · Avg Antivirus Free

Name of the Vulnerable Software and Affected Versions: AVG AntiVirus Free affected versions not specified Description: This issue allows local attackers to create a denial-of-service condition on affected installations. An attacker must first obtain the ability to execute low-privileged code on t...

CVE-2024-42052

The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by placing a wevtutil.exe file in the folder...

CVE-2024-42051

The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by replacing InstRegExp.reg...