9845 matches found
Windows Installer Privilege Escalation
The vulnerability of the Windows Installer installer on Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...
Oracle Business Process Management Suite (Jul 2023 CPU)
The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the July 2023 CPU advisory, including: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component:...
Pakistani Entities Targeted in Sophisticated Attack Deploying ShadowPad Malware
An unidentified threat actor compromised an application used by multiple entities in Pakistan to deliver ShadowPad, a successor to the PlugX backdoor that's commonly associated with Chinese hacking crews. Targets included a Pakistan government entity, a public sector bank, and a telecommunication...
Google Chrome Microsoft Edge Privilege Escalation
The vulnerability of Google Chrome and Microsoft Edge browsers is related to insufficient data validation. Exploiting this vulnerability can allow attackers to enhance their privileges...
Fake TeamViewer Installer Used to Deliver njRAT Malware
By Habiba Rashid A fake and malicious version of TeamViewer is being pushed as legitimate, which in reality infects devices with njRAT Malware aka Bladabindi. This is a post from HackRead.com Read the original post: Fake TeamViewer Installer Used to Deliver njRAT Malware...
Supply-Chain Attack Targeting Pakistani Government Delivers Shadowpad
We recently found that an MSI installer built by the National Information Technology Board NITB, a Pakistani government entity, delivered a Shadowpad sample, suggesting a possible supply-chain attack...
Microsoft Windows Installer Service Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Windows...
CVE-2023-36536
Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...
CVE-2023-34119
Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...
CVE-2023-34119
Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...
CVE-2023-32050
Windows Installer Elevation of Privilege Vulnerability...
CVE-2023-32053
Windows Installer Elevation of Privilege Vulnerability...
CVE-2023-32050
Windows Installer Elevation of Privilege Vulnerability...
CVE-2023-32050
Windows Installer Elevation of Privilege Vulnerability...
CVE-2023-32053
Windows Installer Elevation of Privilege Vulnerability...
CVE-2023-32053
Windows Installer Elevation of Privilege Vulnerability...
Privilege escalation
Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...
Design/Logic Flaw
Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...