EUVD-2020-18680

Malware in sbrugna...

EUVD-2020-18396

Malware in sbrugna...

EUVD-2018-2719

Malware in sbrugna...

CVE-2020-25744

SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could cause a denial of service DoS condition, because a symlink from %LOCALAPPDATA%\SaferVPN\Log is followed...

CVE-2020-26050

SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to SYSTEM via a crafted openssl configuration file. This issue is similar to CVE-2019-12572...

CVE-2020-26050

SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to SYSTEM via a crafted openssl configuration file. This issue is similar to CVE-2019-12572...

Design/Logic Flaw

SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to SYSTEM via a crafted openssl configuration file. This issue is similar to CVE-2019-12572...

CVE-2020-26050

SaferVPN for Windows Ver 5.0.3.3 through 5.0.4.15 could allow local privilege escalation from low privileged users to SYSTEM via a crafted openssl configuration file. This issue is similar to CVE-2019-12572...

CVE-2020-26050

Technical details about CVE-2020-26050 (affected software, root cause, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendor notices.

SaferVPN Security Breach

SaferVPNSaferVPN, SaferVPN is a VPN solution. SaferVPN 5.0.3.3 to 5.0.4.15 has a security vulnerability that can be exploited by attackers to elevate privileges...

CVE-2020-25744

SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could cause a denial of service DoS condition, because a symlink from %LOCALAPPDATA%\SaferVPN\Log is followed...

CVE-2020-25744

SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could cause a denial of service DoS condition, because a symlink from %LOCALAPPDATA%\SaferVPN\Log is followed...

Design/Logic Flaw

SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could cause a denial of service DoS condition, because a symlink from %LOCALAPPDATA%\SaferVPN\Log is followed...

CVE-2020-25744

SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could cause a denial of service DoS condition, because a symlink from %LOCALAPPDATA%\SaferVPN\Log is followed...

CVE-2020-25744

Affected product: SaferVPN on Windows prior to version 5.0.3.3. Issue: a symlink from %LOCALAPPDATA%\SaferVPN\Log is followed, enabling low-privileged users to create or overwrite arbitrary files and cause a denial of service. Impact is DoS (and potential file manipulation as described). Exploita...

SaferVPN for Windows Privileged Access Vulnerability

SaferVPN for Windows is a Windows-based VPN software. A power lifting vulnerability exists in the SaferVPN.Service service in SaferVPN version 4.2.5 for Windows-based platforms. An attacker can exploit this vulnerability to execute code as the SYSTEM user by modifying a configuration file to...

CVE-2018-10647

SaferVPN 4.2.5 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "SaferVPN.Service" service. The "SaferVPN.Service" service executes "openvpn.exe" using OpenVPN config files located within the current user's %LOCALAPPDATA%\SaferVPN\OvpnConfig directory. An authenticated...

Privilege escalation

SaferVPN 4.2.5 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "SaferVPN.Service" service. The "SaferVPN.Service" service executes "openvpn.exe" using OpenVPN config files located within the current user's %LOCALAPPDATA%\SaferVPN\OvpnConfig directory. An authenticated...

CVE-2018-10647

SaferVPN 4.2.5 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "SaferVPN.Service" service. The "SaferVPN.Service" service executes "openvpn.exe" using OpenVPN config files located within the current user's %LOCALAPPDATA%\SaferVPN\OvpnConfig directory. An authenticated...

CVE-2018-10647

The CVE-2018-10647 entry concerns SaferVPN 4.2.5 for Windows. The vulnerability exists in the SaferVPN.Service, which launches openvpn.exe using OpenVPN config files located in the current user’s %LOCALAPPDATA%\SaferVPN\OvpnConfig directory. An authenticated attacker can modify those config files...