PT-2023-6734 · Oracle · Oracle Global Lifecycle Management Nextgen Oui Framework

Name of the Vulnerable Software and Affected Versions: Oracle Global Lifecycle Management NextGen OUI Framework versions prior to 13.9.4.2.11 Description: The issue is related to insufficient input validation in the NextGen Installer issues component of Oracle Global Lifecycle Management NextGen...

Cybercriminals Using Polyglot Files in Malware Distribution to Fly Under the Radar

Remote access trojans such as StrRAT and Ratty are being distributed as a combination of polyglot and malicious Java archive JAR files, once again highlighting how threat actors are continuously finding new ways to fly under the radar. "Attackers now use the polyglot technique to confuse security...

CVE-2023-21542

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-21542

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-21542

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

Windows Installer Elevation of Privilege Vulnerability

...

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...

PT-2023-1131 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Installer component of Windows operating systems. This can allow an attacker to eleva...

CVE-2023-21542 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2023-21542

CVE-2023-21542 is a Windows Installer local elevation of privilege vulnerability. The connected documents (notably the NCSC advisory) list Windows Installer as affected and categorize the impact as “Obtaining increased privileges.” The available sources do not provide root cause specifics, affect...

KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...

CVE-2022-36929

The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user...

CVE-2022-36929

CVE-2022-36929 affects Zoom Rooms Installer for Windows prior to 5.12.6. The vulnerability is a local privilege escalation during the install process, enabling a low-privileged user to gain SYSTEM authority. The connected sources confirm the affected software and the root cause as an installer-ti...

CVE-2022-36929 Local Privilege Escalation in Zoom Rooms for Windows Clients

The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms Installer for Windows versions prior to 5.12.6. An attacker can exploit the...

PT-2023-1100 · Zoom · Zoom Rooms Installer For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Rooms Installer for Windows versions prior to 5.12.6 Description: The issue is related to a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate the...

GHSA-64WV-C7JW-JW2Q Xataface vulnerable to Cross-site Scripting

A vulnerability, which was classified as problematic, has been found in shannah Xataface up to 2.x. Affected by this issue is the function testftp of the file install/installform.js.php of the component Installer. The manipulation leads to cross site scripting. The attack may be launched remotely...

Xataface vulnerable to Cross-site Scripting

A vulnerability, which was classified as problematic, has been found in shannah Xataface up to 2.x. Affected by this issue is the function testftp of the file install/installform.js.php of the component Installer. The manipulation leads to cross site scripting. The attack may be launched remotely...

CVE-2021-4303

A vulnerability, which was classified as problematic, has been found in shannah Xataface up to 2.x. Affected by this issue is the function testftp of the file install/installform.js.php of the component Installer. The manipulation leads to cross site scripting. The attack may be launched remotely...