CVE-2018-8044

CVE-2018-8044 affects K7Computing K7Antivirus Premium 15.1.0.53. The vulnerability is an Incorrect Access Control in the K7Sentry.sys driver, enabling Local Process Execution (local) with low attack complexity and no authentication. NVD CVSS metrics: CVSS v2 base 4.6 (Local, Partial confidentiali...

CVE-2020-24003

Summary: CVE-2020-24003 affects Microsoft Skype for macOS up to 8.59.0.77. The issue is the disable-library-validation entitlement, which can let a local process load a crafted library and thereby obtain unprompted microphone and camera access through the Skype client. This is a local-privilege s...

PT-2021-8857

Name of the Vulnerable Software and Affected Versions K7Antivirus Premium version 15.1.0.53 Description The issue is related to Incorrect Access Control, which can lead to Local Process Execution. The component affected is K7Sentry.sys. Recommendations For version 15.1.0.53, at the moment, there ...

K7 Computing Antivirus Premium和Mobileiron Sentry 访问控制错误漏洞

K7AntiVirus Premium is a security suite from K7 Computing that provides reliable protection against online threats and fraudulent activities, thus protecting you from viruses and cyber attacks. An access control error vulnerability exists in K7Sentry.sys in K7 Computing K7AntiVirus Premium...

pwntools

It is an offensive tool for binary exploitation. The repository contains the pwntools project, a Python library for binary exploitation. The primary vulnerability class targeted by this tool is RCE Remote Code Execution. The probable entry points for this tool are the exploit.py script and the...

OSIsoft PI System (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: OSIsoft Equipment: PI System Vulnerabilities: Uncontrolled Search Path Element, Improper Verification of Cryptographic Signature, Incorrect Default Permissions, Uncaught Exception, Null Pointer...

CVE-2020-11470

Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process with the user's privileges to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Zoom Client's microphone and camera access...

Design/Logic Flaw

Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process with the user's privileges to obtain root access by replacing runwithroot...

CVE-2012-6136

tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes...

CVE-2019-18680

A flaw was found in the Linux kernel's implementation of RDS over TCP. A system that has the rdstcp kernel module that is loaded through an autoload via a local process running listen, or manual loading, could possibly cause a kernel panic. Mitigation While this is a network protocol being...

The vulnerability of the Windows operating system, related to errors in processing Advanced Local Process Call (ALPC) calls, allows a perpetrator to increase their privileges and execute arbitrary code.

The vulnerability of the Windows operating system is related to errors in processing Advanced Local Process Call ALPC calls. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

PT-2019-2968 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling Advanced Local Process Call ALPC calls, which can be exploited to elevate privileges and execute arbitrary code using a specially crafted...

SUSE-SU-2018:2250-1 Security update for the Linux Kernel (Live Patch 1 for SLE 12 SP3)

This update for the Linux Kernel 4.4.82-63 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE-SU-2018:2263-1 Security update for the Linux Kernel (Live Patch 2 for SLE 12 SP3)

This update for the Linux Kernel 4.4.82-66 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE-SU-2018:2262-1 Security update for the Linux Kernel (Live Patch 6 for SLE 12 SP3)

This update for the Linux Kernel 4.4.103-633 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE-SU-2018:2088-1 Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-606454 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data fro...

SUSE-SU-2018:2103-1 Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-606463 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data fro...

SUSE-SU-2018:2098-1 Security update for the Linux Kernel (Live Patch 29 for SLE 12)

This update for the Linux Kernel 3.12.61-52106 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE-SU-2018:2102-1 Security update for the Linux Kernel (Live Patch 26 for SLE 12)

This update for the Linux Kernel 3.12.61-5289 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...

SUSE-SU-2018:2114-1 Security update for the Linux Kernel (Live Patch 35 for SLE 12)

This update for the Linux Kernel 3.12.61-52133 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from...