3a-server (>=0.7.41, <=0.9.10), 3a-server-mongo (>=0.1.0-beta.1, <=1.0.0-beta.1) +547 more potentially affected by CVE-2020-7645 via chrome-launcher (>=0.1.3, <=0.13.1)

chrome-launcher NPM version =0.1.3, =0.7.41, =0.1.0-beta.1, =0.1.3, =0.0.3, =5.0.0-alpha.1, =5.0.0-alpha.1, =5.0.0-beta.3, =0.0.1, =0.1.0, =1.3.0-beta, =1.0.2, =2.0.1-pr.52, =0.0.1-alpha.1, =1.0.0, =0.1.0, =0.1.2 and more Source cves: CVE-2020-7645 Source advisory: SNYK:JS-CHROMELAUNCHER-537575...

Command Injection

Overview chrome-launcher is a library to launch Google Chrome with ease from node. Affected versions of this package are vulnerable to Command Injection. By controlling the $HOME environment variable in Linux operating systems, an attacker can execute arbitrary code. PoC: var maliciouscode = '&...

Thycotic Secret Server Server-Side Request Forgery Vulnerability

Thycotic Secret Server is a privileged account management solution designed for IT administrators and IT security professionals to help these individuals take charge and control of all processes related to password management throughout the organization. A server-side request forgery vulnerabilit...

CVE-2019-18355

An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7...

Server side request forgery (ssrf)

An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7...

CVE-2019-18355

Thycotic Secret Server’s legacy Web launcher contains an SSRF vulnerability (CVE-2019-18355) in versions before 10.7. Connected sources corroborate that an SSRF issue affects the legacy Web launcher, with no public exploit details provided in the documents. The CVSS metrics indicate high to criti...

CVE-2019-18355

An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7...

CVE-2019-18355: Server-Side Request Forgery (SSRF)

An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7...

Uplay 92.0.0.6280 - Local Privilege Escalation

Uplay 92.0.0.6280 - Local Privilege Escalation Exploit Title: Uplay 92.0.0.6280 - Local Privilege Escalation Date: 2019-08-07 Exploit Author: Kusol Watchara-Apanukorn, Pongtorn Angsuchotmetee, Manich Koomsusi Vendor Homepage: https://uplay.ubisoft.com/ Version: 92.0.0.6280 Tested on: Windows 10 x...

NC Launcher2 Command Injection Vulnerability

NC Launcher2 is a game launcher. A command injection vulnerability exists in the custom protocol handler in NNC Launcher2 2.4.1.691 and earlier versions, which can be exploited to execute arbitrary commands with the help of a malicious page...

CVE-2019-12805

NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. This...

CVE-2019-12805

NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. This...

Design/Logic Flaw

NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. This...

CVE-2019-12805 NC Launcher 2 Arbitrary Command Injection Vulnerability

NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier versions have a vulnerability in the custom protocol handler that could allow remote attacker to execute arbitrary command. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. This...

CVE-2019-12805

The CVE-2019-12805 entry concerns NCSOFT Game Launcher, NC Launcher2 (versions up to 2.4.1.691). A vulnerability in the custom protocol handler could allow a remote attacker to execute arbitrary commands when a user visits a malicious page, executing code in the context of the current user. Conne...

PT-2019-12955 · Cncsoft · Ncsoft Game Launcher +1

Name of the Vulnerable Software and Affected Versions: NCSOFT Game Launcher, NC Launcher2 versions 2.4.1.691 and earlier Description: The issue is related to a vulnerability in the custom protocol handler, which could allow a remote attacker to execute arbitrary commands. This requires user...

CVE-2019-13597

s/sprm/s/dyn/PlayersetScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts via Sahi Launcher. Also, one can create a new script with an editor. It is possible to execute commands on the server using the execute function...

CVE-2019-13597

s/sprm/s/dyn/PlayersetScriptFile in Sahi Pro 8.0.0 allows command execution. It allows one to run ".sah" scripts via Sahi Launcher. Also, one can create a new script with an editor. It is possible to execute commands on the server using the execute function...

Sahi Pro 8.0.0 - Remote Command Execution

Sahi Pro 8.0.0 - Remote Command Execution Exploit Title: Sahi Pro V8.0.0 - Unauthenticated Remote Command Execution Date: 2019-07-12 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://sahipro.com Software Link:...

CVE-2019-12573

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to overwrite arbitrary files. The openvpnlauncher binary is setuid root. This binary supports the --log option, which accepts a path as an argument...