CVE-2023-23349

Kaspersky has fixed a security issue in Kaspersky Password Manager KPM for Windows that allowed a local user to recover the auto-filled credentials from a memory dump when the KPM extension for Google Chrome is used. To exploit the issue, an attacker must trick a user into visiting a login form o...

Kaspersky Password Manager 安全漏洞

Kaspersky Password Manager is an application from the Russian laboratory Kaspersky Kaspersky. It provides a function to manage passwords. A security vulnerability exists in versions prior to Kaspersky Password Manager 24.0.0.427, which stems from a vulnerability that allows for the auto-populatio...

KLA65278 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds read vulnerability in...

QEMU Emulator Exploited as Tunneling Tool to Breach Company Network

Threat actors have been observed leveraging the QEMU open-source hardware emulator as tunneling software during a cyber attack targeting an unnamed "large company" to connect to their infrastructure. While a number of legitimate tunneling tools like Chisel, FRP, ligolo, ngrok, and Plink have been...

KLA64845 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in V8 can be exploited to cause denial...

KLA64773 Multiple vulnerabilities in VMware Workstation

Multiple vulnerabilities were found in VMware Workstation. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in UHCI USB controller can be exploited to execute...

Checkmk < 2.2.0p24 Privilege Escalation Vulnerability

Checkmk is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if...

CVE-2024-1619

Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...

CVE-2024-1619

Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...

Security feature bypass

Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...

CVE-2024-1619

Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...

CVE-2024-1619

Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker could potentially force an administrator to click on a malicious link to perform unauthorized actions...

CVE-2024-1619

CVE-2024-1619 affects Kaspersky Security 8.0 for Linux Mail Server. The vulnerability allows an attacker to coerce an administrator into clicking a malicious link, enabling unauthorized actions. Affected component/process: Kaspersky Security 8.0 for Linux Mail Server; root cause details are not p...

Kaspersky Security Security Vulnerabilities

Kaspersky Security is a security program from the Russian laboratory Kaspersky. A security vulnerability exists in Kaspersky Security version 8.0. An attacker has exploited the vulnerability to force an administrator to click on a malicious link to perform an unauthorized action...

PT-2024-1793 · Kaspersky · Kaspersky Endpoint Security For Windows

Name of the Vulnerable Software and Affected Versions: Kaspersky Endpoint Security for Windows affected versions not specified Description: The issue is related to insecure privilege management in Kaspersky Endpoint Security for Windows. It may allow a remote attacker to suspend the operation of...

KLA64091 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Content...

KLA63867 OSI vulnerability in PostgreSQL

Privilege escalation vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to execute arbitrary code, obtain sensitive information, cause denial of service. Original advisories CVE-2024-0985: PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes...

PT-2025-5830 · Kaspersky · Kaspersky For Windows +10

Name of the Vulnerable Software and Affected Versions: Kaspersky Anti-Virus SDK for Windows affected versions not specified Kaspersky Security for Virtualization Light Agent affected versions not specified Kaspersky Endpoint Security for Windows affected versions not specified Kaspersky Small...

The vulnerability of Kaspersky Security for Linux Mail Server 8’s antivirus software lies in its lack of measures to neutralize certain special elements. This vulnerability allows attackers to carry out unauthorized activities.

The vulnerability of Kaspersky Security for Linux Mail Server 8 exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to perform unauthorized actions when an administrator clicks on a malicious link...

KLA63225 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, obtain sensitive information, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of...