CVE-2020-9331: Undefined Security Weakness

CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation by local users with the SeChangeNotifyPrivilege right because user-mode input is mishandled during process creation. An attacker can write arbitrary data to an arbitrary location in the kernel's address space...

PT-2020-20609

Name of the Vulnerable Software and Affected Versions CryptoPro CSP versions through 5.0.0.10004 on 64-bit platforms Description The issue allows local users with the SeChangeNotifyPrivilege right to cause denial of service. This is because user-mode input is mishandled during process creation...

PT-2020-20589

Name of the Vulnerable Software and Affected Versions CryptoPro CSP versions prior to 5.0.0.10004 on 32-bit platforms Description The issue allows local privilege escalation by local users with the SeChangeNotifyPrivilege right due to mishandled user-mode input during process creation. This enabl...

CVE-2020-9361: Undefined Security Weakness

CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode input is mishandled during process creation...

Security Bulletin: Multiple Vulnerabilities in Go affects IBM Watson Studio Local

Summary Security Bulletin: Multiple Vulnerabilities in Go affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-11841 DESCRIPTION: A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to th...

Linux/ARM - Fork Bomb Shellcode (20 bytes)

Title: Linux/ARM - Fork Bomb Shellcode 20 bytes Category: Shellcode Tested: armv7l 32-bitRaspberry Pi 2 Model B OS: Raspbian Buster Lite Author: CJHackerz Description: This shellcode creates new processes in infinite loop to exhaust CPU resources leading to crash / Compilation instruction...

procps: Integer overflows leading to heap overflow in file2strvec

Multiple integer overflows leading to heap corruption flaws were discovered in file2strvec. These vulnerabilities can lead to privilege escalation for a local attacker who can create entries in procfs by starting processes, which will lead to crashes or arbitrary code execution in proc utilities...

CVE-2019-11888

Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive information or gain privileges...

CVE-2019-11888

Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive information or gain privileges...

Information disclosure

Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive information or gain privileges...

CVE-2019-11888

Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive information or gain privileges...

CVE-2019-11888

CVE-2019-11888: Affects Go 1.12.5 on Windows where process creation with a nil environment in combination with a non-nil token can disclose information or allow privilege escalation. Connected vendors reference multiple advisories: IBM IBM API Connect Bulletins indicate remediation in 2018.4.1.7 ...

CVE-2019-11888

Removed by vendor...

CVE-2019-11888

Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive information or gain privileges...

CVE-2019-11888: Improper Privilege Management

Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers to obtain sensitive information or gain privileges...

PT-2019-12545

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.12.6 Description The issue arises from mishandling process creation with a nil environment in conjunction with a non-nil token, allowing attackers to obtain sensitive information or gain privileges. Recommendations For...

VMware Workstation 14.1.5 / VMware Player 15.0.2 - Host VMX Process Impersonation Hijack Privilege Escalation

VMware: Host VMX Process Impersonation Hijack EoP Platform: VMware Workstation Windows v14.1.5 on Windows 10. Also tested VMware Player 15.0.2. Class: Elevation of Privilege Summary: The creation of the VMX process on a Windows host can be hijacked leading to elevation of privilege. Description:...

Recommendations for deploying the latest Attack surface reduction rules for maximum impact

The keystone to good security hygiene is limiting your attack surface. Attack surface reduction is a technique to remove or constrain exploitable behaviors in your systems. In this blog, we discuss the two attack surface reduction rules introduced in the most recent release of Windows and cover...

An Open-Source Pre and Post Callback-Based Framework for macOS Kernel Monitoring: Kemon

If third-party vendors want to add new features to the macOS kernel, such as antivirus capabilities, ransomware blocking, data breach auditing, behavior monitoring and so on, they usually need the support of the system’s exported interfaces. At present, only two known official interfaces are...

Microsoft Windows: Audit Process Creation

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winprocesscreation.nasl 11068 2018-08-21 11:51:41Z emoss $ Check value for Audit Process Creation Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...