DEV-0139 launches targeted attacks against the cryptocurrency industry

Over the past several years, the cryptocurrency market has considerably expanded, gaining the interest of investors and threat actors. Cryptocurrency itself has been used by cybercriminals for their operations, notably for ransom payment in ransomware attacks, but we have also observed threat...

CVE-2022-43516

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation MSI...

CVE-2022-43516

A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in Windows Firewall after Zabbix agent installation MSI...

CVE-2022-31877

An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet...

CVE-2022-31877

An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet...

Design/Logic Flaw

An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet...

PT-2022-20968 · Msi · Msi Center

Name of the Vulnerable Software and Affected Versions: MSI Center version 1.0.41.0 Description: An issue in the component MSI.TerminalServer.exe allows attackers to escalate privileges via a crafted TCP packet. Recommendations: For MSI Center version 1.0.41.0, at the moment, there is no informati...

CVE-2022-31877

An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet...

CVE-2022-31877

MSI Center v1.0.41.0 is affected by a privilege-escalation flaw in the MSI.TerminalServer.exe component. The issue allows an attacker to elevate privileges by sending a crafted TCP packet. Public guidance across connected sources confirms the affected product/version and the underlying component;...

CVE-2022-31877

An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet...

Watch Out Gamers: Hackers Exploiting MSI Afterburner to Deliver Coin Miner

By Habiba Rashid So far, researchers have identified approximately 50 phishing websites, all targeting MSI Afterburner to deliver malware. This is a post from HackRead.com Read the original post: Watch Out Gamers: Hackers Exploiting MSI Afterburner to Deliver Coin Miner...

msi-securite.com Cross Site Scripting vulnerability OBB-3066243

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

November 1, 2022, update for Office 2016 (KB5002306)

None None...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: A use-after-free in clsroute filter implementation may lead to privilege escalation CVE-2022-2588 Information leak in scsiioctl CVE-2022-0494 A kernel-info-leak issue in pfkeyregister CVE-2022-13...

CVE-2020-12744

The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair...

CVE-2020-12744

The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair...

Design/Logic Flaw

The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair...

CVE-2020-12744

CVE-2020-12744 affects Verint Desktop Resources 15.2 where the MSI installer allows an unprivileged local user to elevate privileges during installation or repair. The root cause is a privilege-escalation opportunity within the MSI installer process, enabling local elevation with HIGH impact on c...

CVE-2020-12744

The MSI installer in Verint Desktop Resources 15.2 allows an unprivileged local user to elevate their privileges during install or repair...

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet Iss...