AZORult spreads as a fake ProtonVPN installer

AZORult has its history. However, a few days ago, we discovered what appears to be one of its most unusual campaigns: abusing the ProtonVPN service and dropping malware via fake ProtonVPN installers for Windows. Screenshot of a fake ProtonVPN website The campaign started at the end of November 20...

Code Execution Vulnerability in Thunderbolt X Installer

Thunderbolt X is an Internet download tool software. A code execution vulnerability exists in the Xunlei X installer. An attacker can exploit the vulnerability to execute arbitrary code...

Code Execution Vulnerability in QQ Pinyin Input Method Installer

QQ Pinyin Input Method is a Chinese pinyin input method software. A code execution vulnerability exists in the QQ Pinyin Input Method installer. It can be exploited by an attacker to execute arbitrary code...

Microsoft Windows Modules Installer Servic Information Disclosure Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Modules Installer Service. An attacker could exploit this vulnerability to view any file on the file system with...

Code Execution Vulnerability in Bandicam Installer

Bandicam Bandi Screen Recorder is an HD video recording software. A code execution vulnerability exists in the Bandicam installer. An attacker can exploit the vulnerability to execute arbitrary code...

Code Execution Vulnerability in QQGame Installer QQGameMini

QQGame is a casual game platform independently developed by Tencent QQ Games. A code execution vulnerability exists in the QQGame installation package, QQGameMini. An attacker can exploit the vulnerability to execute arbitrary code...

chromium-browser: Inappropriate implementation in installer

Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

The vulnerability of the Intel Raid Web Console 2 installer allows a hacker to increase their privileges.

The vulnerability of the Intel Raid Web Console 2 installer is related to incorrect standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...

MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation

Exploit Title: MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation Author: nu11secur1ty Date: 2020-02-14 Vendor: Microsoft Link: https://github.com/nu11secur1ty/Windows10Exploits/tree/master/Undefined/CVE-2020-0683/nu11secur1ty CVE: CVE-2020-0683 + Credits: Ventsislav...

Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2020-16837)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A privilege extraction vulnerability exists in Microsoft Windows Installer. An attacker could use this vulnerability to bypass access restrictions to add or delete files...

CVE-2020-0563

Improper permissions in the installer for IntelR MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0564

Improper permissions in the installer for IntelR RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0563

Improper permissions in the installer for IntelR MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0564

Improper permissions in the installer for IntelR RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0562

Improper permissions in the installer for IntelR RWC2, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for IntelR RWC2, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for IntelR RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for IntelR MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0562

CVE-2020-0562 concerns Intel(R) RAID Web Console 2 (RWC2). The issue is improper installer permissions that may let an authenticated local user escalate privileges. Intel’s advisory (Intel® RWC2 Advisory, Intel-SA-00339) confirms affected product: all versions of RWC2, with a CVSSv3.1 base score ...