Lucene search
+L

7442 matches found

ATTACKERKB
ATTACKERKB
added 2022/01/10 2:10 p.m.5 views

CVE-2021-30360

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client...

7.8CVSS7AI score0.0057EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/10 2:10 p.m.8 views

CVE-2021-30360

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client...

7.8CVSS5.8AI score0.0057EPSS
SaveExploits1References2
Prion
Prion
added 2022/01/10 2:10 p.m.22 views

Design/Logic Flaw

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client...

7.2CVSS7.6AI score0.0057EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:0 a.m.11 views

The vulnerability of the Google Chrome web app installer allows a hacker to manipulate the URL input by using a specially created HTML page.

The vulnerability of the Google Chrome WebApp installer is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to manipulate the URL input using a specially created HTML page...

6.5CVSS6.9AI score0.00784EPSS
SaveExploits0References8Affected Software7
CVE
CVE
added 2022/01/07 10:39 p.m.59 views

CVE-2021-30360

The CVE-2021-30360 entry describes a local, privilege-escalation risk tied to Windows Installer repairs. An attacker with local access can trigger a repair process and place a crafted executable in the repair folder, which then runs with the privileges of the Check Point Remote Access Client. CVS...

7.8CVSS7.5AI score0.0057EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/01/07 10:39 p.m.32 views

CVE-2021-30360

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client...

7.8AI score0.0057EPSS
SaveExploits1References2
Qualys Blog
Qualys Blog
added 2022/01/06 2:5 p.m.119 views

Emotet Re-emerges with Help from TrickBot

Emotet has recently reemerged after being taken down less than a year ago by global law enforcement as coordinated by Europol and Eurojust. The takedown was achieved after law enforcement compromised a command-and-control system, and then pushed a specially crafted update to Emotet agents that...

9.3CVSS1.3AI score0.99693EPSS
SaveExploits104
ThreatPost
ThreatPost
added 2022/01/04 5:12 p.m.45 views

Purple Fox Rootkit Dropped by Malicious Telegram Installers

A malicious Telegram instant-messaging app installer scurries past a slew of antivirus AV engines to deliver Purple Fox malware, evading detection by separating the attack into bite-sized morsels that fly under the radar. In a Monday report, Minerva Labs said that the attack evades detection by A...

7.3AI score
SaveExploits0References12
Malwarebytes
Malwarebytes
added 2022/01/04 2:2 p.m.18 views

Purple Fox rootkit now bundled with Telegram installer

The Purple Fox rootkit is being spread as an installer for the popular Telegram instant messaging app for Windows, according to researchers. Its not clear how the installer in this case was distributed, although it seems like at least some were delivered via email. Common distribution methods for...

0.8AI score
SaveExploits0
CNVD
CNVD
added 2022/01/03 12:0 a.m.28 views

Netgear Genie Permissions Licensing and Access Control Issues Vulnerability

Netgear genie, a Netgear program that presents itself as a dashboard, is vulnerable to a permission and access control issue in Netgear Genie Installer for macOS, which stems from the fact that all known versions of Netgear Genie Installer contain a local elevation of privileges vulnerability. Th...

7.8CVSS3.5AI score0.00289EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/30 10:15 p.m.5 views

CVE-2021-20172

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be...

7.8CVSS7.1AI score0.00289EPSS
SaveExploits1References2
Prion
Prion
added 2021/12/30 10:15 p.m.17 views

Privilege escalation

All known versions of the Netgear Genie Installer for macOS contain a local privilege escalation vulnerability. The installer of the macOS version of Netgear Genie handles certain files in an insecure way. A malicious actor who has local access to the endpoint on which the software is going to be...

7.2CVSS7.5AI score0.00289EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/30 12:0 a.m.7 views

Netgear genie 权限许可和访问控制问题漏洞

Netgear genie, a Netgear program that presents itself as a dashboard, is vulnerable to a permission and access control issue in Netgear Genie Installer for macOS, which stems from the fact that all known versions of Netgear Genie Installer contain a local elevation of privileges vulnerability. Th...

7.8CVSS5.6AI score0.00289EPSS
SaveExploits1References3
OSV
OSV
added 2021/12/22 7:15 p.m.7 views

CVE-2021-21911

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

7.8CVSS7.1AI score0.00314EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/12/22 7:15 p.m.5 views

CVE-2021-21911

A privilege escalation vulnerability exists in the Windows version of installation for Advantech R-SeeNet Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority. An attacker can provide a malicious file to trigger...

8.8CVSS7.1AI score0.00314EPSS
SaveExploits1References2
NVD
NVD
added 2021/12/20 9:15 p.m.21 views

CVE-2021-42808

Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges...

7.2CVSS0.00225EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/20 9:15 p.m.6 views

CVE-2021-42808

Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges...

6.7CVSS6.7AI score0.00225EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/20 9:15 p.m.4 views

CVE-2021-42808

Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges...

7.2CVSS6.7AI score0.00225EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2021/12/20 9:15 p.m.27 views

CVE-2021-42809

Improper Access Control of Dynamically-Managed Code Resources DLL in Thales Sentinel Protection Installer could allow the execution of arbitrary code...

7.8CVSS0.00294EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/20 9:15 p.m.25 views

Improper access control

Improper Access Control of Dynamically-Managed Code Resources DLL in Thales Sentinel Protection Installer could allow the execution of arbitrary code...

6.9CVSS7.7AI score0.00294EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder