17565 matches found
Microsoft Windows Defender / Backdoor_JS.Relvelshe.A Detection / Mitigation Bypass
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: https://hyp3rlinx.altervista.org/advisories/WindowsDefenderBackdoorJS.Relvelshe.ADetectionMitigationBypass.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows Defender...
Microsoft Windows Defender Bypass - Detection Mitigation Bypass Vulnerability
Back in 2022, the researcher released a proof of concept to bypass the Backdoor:JS/Relvelshe.A detection in Windows Defender but it no longer works as it was mitigated. However, adding a simple javascript try catch error statement and eval'ing the hex string, it executes as of the time of this...
Intel Memory and Storage Tool < 2.3 Multiple Vulnerabilities (INTEL-SA-00967)
The version of Intel Memory and Storage Tool installed on the remote host is prior to 2.3. It is, therefore, affected by multiple vulnerabilities as referenced in the INTEL-SA-00967 advisory. - Improper initialization in some IntelR MAS software before version 2.3 may allow an authenticated user ...
Design/Logic Flaw
In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-42776
Improper input validation in some IntelR SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access...
CVE-2023-41252
Out-of-bounds read in some IntelR QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-41252
Out-of-bounds read in some IntelR QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-41231
Incorrect default permissions in some ACAT software maintained by IntelR before version 2.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-41231
Incorrect default permissions in some ACAT software maintained by IntelR before version 2.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-41090
Race condition in some IntelR MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-41091
Uncontrolled search path for some IntelR MPI Library Software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-40161
Improper access control in some Intel UniteR Client software before version 4.2.35041 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-41091
Uncontrolled search path for some IntelR MPI Library Software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-40156
Uncontrolled search path element in some IntelR SSU software before version 3.0.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-40156
Uncontrolled search path element in some IntelR SSU software before version 3.0.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-40154
Incorrect default permissions in the IntelR SUR for Gameplay Software before version 2.0.1901 may allow privillaged user to potentially enable escalation of privilege via local access...
CVE-2023-40154
Incorrect default permissions in the IntelR SUR for Gameplay Software before version 2.0.1901 may allow privillaged user to potentially enable escalation of privilege via local access...
CVE-2023-39932
Uncontrolled search path in the IntelR SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user to potentially enable escalation of privilege via local access...