Lucene search
+L

641 matches found

Prion
Prion
•added 2020/03/18 9:15 p.m.•21 views

Design/Logic Flaw

Adaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder...

4.6CVSS7.6AI score0.00478EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/03/18 9:15 p.m.•7 views

CVE-2019-18979

Adaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder...

7.8CVSS7.4AI score0.00478EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2020/03/18 8:25 p.m.•34 views

CVE-2019-18979

Adaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder...

7.6AI score0.00478EPSS
SaveExploits0References1
CVE
CVE
•added 2020/03/18 8:25 p.m.•93 views

CVE-2019-18979

Summary: CVE-2019-18979 affects Adaware Antivirus versions 12.6.1005.11662 and 12.7.1055.0. The vulnerability is described as a quarantine-related flaw that enables privilege escalation. Exploitation is reported to use an NTFS directory junction to move a malicious DLL from quarantine into the sy...

7.8CVSS7.5AI score0.00478EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/18 12:00 a.m.•5 views

CVE-2019-18979: Undefined Security Weakness

Adaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder...

7.8CVSS7.2AI score0.00478EPSS
SaveExploits0References1
Krebs on Security
Krebs on Security
•added 2020/03/16 12:55 p.m.•49 views

The Web’s Bot Containment Unit Needs Your Help

Anyone who's seen the 1984 hit movie Ghostbusters likely recalls the pivotal scene where a government bureaucrat orders the shutdown of the ghost containment unit, effectively unleashing a pent-up phantom menace on New York City. Now, something similar is in danger of happening in cyberspace:...

7AI score
SaveExploits0
Mageia
Mageia
•added 2020/03/06 4:13 p.m.•77 views

Updated xen packages fix security vulnerability

- Updated from 4.12.0 to 4.12.1 - Device quarantine for alternate pci assignment methods XSA-306 - x86: Machine Check Error on Page Size Change DoS XSA-304, CVE-2018-12207 - TSX Asynchronous Abort speculative side channel XSA-305, CVE-2019-11135 - VCPUOPinitialise DoS XSA-296, CVE-2019-18420...

9.8CVSS7AI score0.03133EPSS
SaveExploits0References11
OSV
OSV
•added 2020/03/06 4:13 p.m.•13 views

MGASA-2020-0113 Updated xen packages fix security vulnerability

Updated from 4.12.0 to 4.12.1 - Device quarantine for alternate pci assignment methods XSA-306 - x86: Machine Check Error on Page Size Change DoS XSA-304, CVE-2018-12207 - TSX Asynchronous Abort speculative side channel XSA-305, CVE-2019-11135 - VCPUOPinitialise DoS XSA-296, CVE-2019-18420...

9.8CVSS6.9AI score0.03133EPSS
SaveExploits0References12
OSV
OSV
•added 2020/03/02 5:15 a.m.•9 views

CVE-2020-6797

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact...

4.3CVSS7AI score0.01478EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2020/03/02 5:15 a.m.•8 views

CVE-2020-6797

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact...

4.3CVSS6.7AI score0.01478EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2020/02/07 12:00 a.m.•44 views

SUSE SLES12 Security Update : xen (SUSE-SU-2020:0334-1)

This update for xen fixes the following issues : CVE-2020-7211: potential directory traversal using relative paths via tftp server on Windows host bsc1161181. CVE-2019-19579: Device quarantine for alternate pci assignment methods bsc1157888. CVE-2019-19581: findnextbit issues bsc1158003...

9.8CVSS6.8AI score0.0431EPSS
SaveExploits0References40
GithubExploit
GithubExploit
•added 2020/02/04 10:38 p.m.•205 views

Exploit for OS Command Injection in Docker

CVE-2019-5736-Custom-Sandbox General CVE-2019-5736 implem...

9.3CVSS7.1AI score0.98452EPSS
SaveExploits35
NVD
NVD
•added 2020/01/10 6:15 p.m.•35 views

CVE-2019-18194

TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder...

7.8CVSS7.6AI score0.02209EPSS
SaveExploits3References2
OSV
OSV
•added 2020/01/10 6:15 p.m.•18 views

CVE-2019-18194

TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder...

7.8CVSS7.1AI score0.02209EPSS
SaveExploits3References2
Prion
Prion
•added 2020/01/10 6:15 p.m.•24 views

Design/Logic Flaw

TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder...

6.9CVSS7.5AI score0.02209EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist
•added 2020/01/10 5:26 p.m.•39 views

CVE-2019-18194

TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder...

7.6AI score0.02209EPSS
SaveExploits3References2
CVE
CVE
•added 2020/01/10 5:26 p.m.•156 views

CVE-2019-18194

TotalAV 2020 4.14.31 is affected by CVE-2019-18194, a privilege-escalation vulnerability where exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder. The vulnerability is supported by multiple sources (Red Hat advisory, CNVD, CVE records,...

7.8CVSS7.5AI score0.02209EPSS
SaveExploits3References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/10 12:00 a.m.•5 views

CVE-2019-18194: Undefined Security Weakness

TotalAV 2020 4.14.31 has a quarantine flaw that allows privilege escalation. Exploitation uses an NTFS directory junction to restore a malicious DLL from quarantine into the system32 folder...

7.8CVSS7.2AI score0.02209EPSS
SaveExploits3References1
exploitpack
exploitpack
•added 2020/01/10 12:00 a.m.•88 views

TotalAV 2020 4.14.31 - Privilege Escalation

TotalAV 2020 4.14.31 - Privilege Escalation Exploit Title: TotalAV 2020 4.14.31 - Privilege Escalation Date: 2020-01-09 Exploit Author: Kusol Watchara-Apanukorn Vendor Homepage: https://www.totalav.com/ Version: 4.14.31 Fixed on: 5.3.35 Tested on: Windows 10 x64 CVE : CVE-2019-18194 Vulnerability...

6.9CVSS0.4AI score0.02209EPSS
SaveExploits3
zdt
zdt
•added 2020/01/10 12:00 a.m.•114 views

TotalAV 2020 4.14.31 - Privilege Escalation Vulnerability

Exploit Title: TotalAV 2020 4.14.31 - Privilege Escalation Exploit Author: Kusol Watchara-Apanukorn Vendor Homepage: https://www.totalav.com/ Version: 4.14.31 Fixed on: 5.3.35 Tested on: Windows 10 x64 CVE : N/A Vulnerability Description: TotalAV 2020 4.14.31 has quarantine flaw that allows...

0.7AI score
SaveExploits0
Rows per page
Query Builder