[SECURITY] Fedora 38 Update: mingw-nsis-3.09-1.fc38

NSIS, the Nullsoft Scriptable Install System, is a script-driven Windows installation system. This package includes native Fedora binaries of makensis etc. and all plugins...

[SECURITY] Fedora 37 Update: mingw-nsis-3.09-1.fc37

NSIS, the Nullsoft Scriptable Install System, is a script-driven Windows installation system. This package includes native Fedora binaries of makensis etc. and all plugins...

Fedora 37 : mingw-nsis (2023-b9ec99605f)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b9ec99605f advisory. Update to 3.09, fixes CVE-2023-37378. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Fedora 38 : mingw-nsis (2023-dfb6cc599f)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-dfb6cc599f advisory. Update to 3.09, fixes CVE-2023-37378. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

Mishandled Access Control

The NSIS Nullsoft Scriptable Install System is vulnerable to Access Control Vulnerability. The vulnerability is due to not restricting or incorrectly restricting access to an uninstaller directory from an unauthorized actor leading to priviledge escalation...

Debian: Security Advisory (DLA-3483-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3483 : nsis - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3483 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3483-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3483-1] nsis security update

Debian LTS Advisory DLA-3483-1 [email protected] https://www.debian.org/lts/security/ Sean Whitton July 07, 2023 https://wiki.debian.org/LTS Package : nsis Version : 3.04-1+deb9u1 CVE ID : CVE-2023-37378 It was discovered that the Nullsoft Scriptable Install System NSIS before version...

DLA-3483-1 nsis - security update

Bulletin has no description...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory...

CVE-2023-37378

CVE-2023-37378 concerns Nullsoft Scriptable Install System (NSIS) prior to 3.09, where an uninstaller directory’s access control is mishandled. This could enable an attacker with local access to abuse the uninstaller folder if NSIS is used on a system, potentially permitting escalation of privile...

SupremeBot and Mario cross the finish line together

Researchers have reported how popular game installers like Super Mario Games are being used to deliver malware. The malicious components include cryptominers, the SupremeBot mining client, and the open-source Umbral stealer. The game installers route offers some very distinct advantages to the...

GuLoader Malware Using Malicious NSIS Executables to Target E-Commerce Industry

E-commerce industries in South Korea and the U.S. are at the receiving end of an ongoing GuLoader malware campaign, cybersecurity firm Trellix disclosed late last month. The malspam activity is notable for transitioning away from malware-laced Microsoft Word documents to NSIS executable files for...

GuLoader: The NSIS Vantage Point

GuLoader: The NSIS Vantage Point By Nico Paulo Yturriaga · January 24, 2023 GuLoader is an advanced shellcode downloader infamous for using anti-analysis tricks to evade detection and obstruct reverse engineering. As of this writing, the GuLoader campaign is aggressively ongoing. Trellix’s...

GuLoader: The NSIS Vantage Point

GuLoader: The NSIS Vantage Point By Nico Paulo Yturriaga · January 24, 2023 GuLoader is an advanced shellcode downloader infamous for using anti-analysis tricks to evade detection and obstruct reverse engineering. As of this writing, the GuLoader campaign is aggressively ongoing. Trellix’s...

Mageia: Security Advisory (MGASA-2017-0271)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...