Zyxel NAS 326 Shell Metacharacter Injection Vulnerability

Zyxel NAS 326 is a two-drive personal cloud storage device from Zyxel Hopscotch. A Shell metacharacter injection vulnerability exists in the package installer in Zyxel NAS 326 5.21 and earlier versions. An authenticated attacker can exploit this vulnerability to execute arbitrary code via multipl...

Nextcloud: In Dockerized Environments, Failing to Read config.php Grants Any Anonymous User Full Admin Access

Consider this deployment: - Nextcloud is already installed in a Dockerized environment. - There are two Nextcloud containers running in the environment. - Both containers share the same MySQL database. - Both containers share the same data /var/www/html/data and config /var/www/html/config via...

Privilege escalation

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of installed games to exploit this vulnerability and execute arbitrary code with elevat...

CVE-2018-4049

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of installed games to exploit this vulnerability and execute arbitrary code with elevat...

The installer of Microsoft Teams may insecurely load Dynamic Link Libraries

Overview The installer of Microsoft Teams contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Microsoft states that the root cause of this vulnerability is "Application Directory App Dir DLL planting", thus there is no plan to release a...

April 2, 2019, update for Office 2016 (KB4462116)

None None...

Gemalto Sentinel Protection Installer Detection (Windows SMB Login)

Detects the installed version of Gemalto Sentinel Protection Installer for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

PortSwigger Web Security: DLL Hijacking in Burp Suite Pro 2.0.19 Installer

I've found that the latest installer of Burp Suite Pro tries to load some DLLs from an unprotected folder. After providing it with admin privileges required to install it tries to load these DLLs: C:\Users\bortto\AppData\Local\Temp\e4jA5E5.tmpdir1553882416\jre\bin\WINMM.dll...

Commando VM — Turn Your Windows Computer Into A Hacking Machine

FireEye today released Commando VM , which according to the company, is a "first of its kind Windows-based security distribution for penetration testing and red teaming." When it comes to the best-operating systems for hackers, Kali Linux is always the first choice for penetration testers and...

Apple iCloud for Windows iCloud Installer Code Execution Vulnerability

Apple iCloud for Windows is an American Apple Apple cloud service based on the Windows platform, which supports storage of music, photos, apps, contacts, etc. iCloud Installer is one of the iCloud installer components. A security vulnerability exists in the Windows Installer component in versions...

Intel Rapid Storage Technology enterprise Intel Accelerated Storage Manager elevation of privilege vulnerability

Intel Rapid Storage Technology enterprise RSTe is a rapid storage technology from Intel, U.S. Intel Accelerated Storage Manager is one of the accelerated storage managers. A security vulnerability exists in the installer for Intel Accelerated Storage Manager in Intel RSTe 5.5 and earlier versions...

CVE-2019-0135

Improper permissions in the installer for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206...

CVE-2019-0135

Improper permissions in the installer for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206...

Input validation

Improper permissions in the installer for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206...

CVE-2019-5922

Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-5922

The CVE-2019-5922 issue affects the installer of Microsoft Teams, where an unsafe DLL search path (App Dir DLL planting) could allow arbitrary code to run with the caller’s privileges. Affected product: the Teams installer (prior to version 1.3.00.362). Root cause: insecure loading of Dynamic Lin...

Pirate matryoshka

The use of torrent trackers to spread malware is a well-known practice; cybercriminals disguise it as popular software, computer games, media files, and other sought-after content. We detected one such campaign early this year, when The Pirate Bay TPB tracker filled up with harmful files used to...

March 5, 2019, update for Office 2016 (KB4032231)

None None...

Intel OpenVINO for Linux Installer Information Disclosure Vulnerability

Intel OpenVINO for Linux is an open visual inference and neural network optimization toolkit for Linux-based platforms from Intel USA. A security vulnerability exists in the installer in IntelR OpenVINOTM 2018 R3 and earlier versions for Linux-based platforms, which stems from a logic error in th...