Updating Veeam Installer Service fails with "Another version of this product is already installed"

Challenge When updating the Veeam Agent for Microsoft Windows deployment on a machine that is part of a 'Computers with pre-installed agents' Protection Group, attempting to run VeeamInstallerSvc.msi causes the error message: Another version of this product is already installed. Installation of...

PseudoManuscrypt Malware Spreading the Same Way as CryptBot Targets Koreans

Numerous Windows machines located in South Korea have been targeted by a botnet tracked as PseudoManuscrypt since at least May 2021 by employing the same delivery tactics of another malware called CryptBot. "PseudoManuscrypt is disguised as an installer that is similar to a form of CryptBot, and ...

Cobbler 命令注入漏洞

Cobbler is a network installation server suite that is primarily used to quickly set up Linux network installations. A command injection vulnerability exists in versions of Cobbler prior to 3.3.1, stemming from the checkforinvalidimports function in the templar.py file, which allows Cheetah code ...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Atlassian Confluence Server 代码问题漏洞

Atlassian Confluence Server is a server version of Atlassian Australia's suite of collaborative software with enterprise knowledge management capabilities and support for building enterprise WiKi. An elevation of privilege vulnerability exists in Atlassian Confluence Server, which stems from an...

PT-2022-11940 · Atlassian +1 · Confluence +1

Name of the Vulnerable Software and Affected Versions: Atlassian Confluence Server and Data Center versions prior to 7.4.10 Atlassian Confluence Server and Data Center versions 7.5.0 through 7.12.3 Description: The issue allows authenticated local attackers to achieve elevated privileges on the...

PT-2022-3208

Name of the Vulnerable Software and Affected Versions Caphyon Advanced Installer versions 19.3 and earlier Description The issue is related to the Advanced Updater function in Caphyon Advanced Installer, which is vulnerable to remote code execution due to the lack of integrity check when handling...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Cleanup Manager in Windows operating systems relates to the improper handling of references before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2022-22528

SAP Adaptive Server Enterprise ASE - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform which, under certain conditions, allows a Standard User to execute malicious Windows binaries which may lead to privilege escalation on the local system. The...

CVE-2021-33129

Incorrect default permissions in the software installer for the IntelR Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33129

CVE-2021-33129 affects Intel® Advisor prior to version 2021.4.0. The root cause is incorrect default permissions in the software installer, which may allow an authenticated user to escalate privileges via local access. Per the Intel advisory, the CVSS v3.1 base score is 7.8 (HIGH) with local atta...

CVE-2021-33129

Incorrect default permissions in the software installer for the IntelR Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Advisor 安全漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation. A security vulnerability exists in Intel Advisor that stems from incorrect default permissions in the software installer IntelR Advisor prior to version 2021.4.0 may allow authenticated users ...

PT-2022-15497 · Sap +1 · Sap Adaptive Server Enterprise +1

Name of the Vulnerable Software and Affected Versions: SAP Adaptive Server Enterprise ASE version 16.0 Description: The issue arises during the installation of SAP Adaptive Server Enterprise ASE on the Windows platform, where an entry is made in the system PATH environment variable. Under certain...

Microsoft Temporarily Disables MSIX App Installers to Prevent Malware Abuse

Microsoft last week announced that it's temporarily disabling the MSIX ms-appinstaller protocol handler in Windows following evidence that a security vulnerability in the installer component was exploited by threat actors to deliver malware such as Emotet, TrickBot, and Bazaloader. MSIX, based on...

Adobe Creative Cloud Desktop Application 代码问题漏洞

Adobe Creative Cloud Desktop Application is a suite of applications from Adobe for managing applications and services in the Creative Cloud Member Management Center. The application supports synchronizing and sharing files, managing fonts, and accessing a library of assets for commercial...

PrinterLogic Web Stack Insecure Direct Object Reference (IDOR) Vulnerability (CNVD-2022-11105)

PrinterLogic Web Stack PrinterLogic Printer Installer is a native Web application from PrinterLogic, Inc. It enables the It department to manage and automatically create/propagate PrinterObjects and printer drivers across print environments from a single management console. PrinterLogic Web Stack...

New SEO Poisoning Campaign Distributing Trojanized Versions of Popular Software

An ongoing search engine optimization SEO poisoning attack campaign has been observed abusing trust in legitimate software utilities to trick users into downloading BATLOADER malware on compromised machines. "The threat actor used 'free productivity apps installation' or 'free software developmen...

PrinterLogic Web Stack SQL注入漏洞

PrinterLogic Web Stack PrinterLogic Printer Installer is a native Web application from PrinterLogic USA, Inc. Enabling It departments to manage and automate the creation/propagation of PrinterObjects and printer drivers across print environments from a single management console. PrinterLogic Web...

PrinterLogic Web Stack 跨站脚本漏洞

PrinterLogic Web Stack PrinterLogic Printer Installer is a native Web application from PrinterLogic, Inc. It enables It departments to manage and automate the creation/propagation of PrinterObjects and printer drivers across print environments from a single management console. PrinterLogic Web...