65 matches found
CVE-2018-4004
An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the disconnectService functionality. A non-root user is able to kill any privileged process on the system. An attacker would need local access to the machine for a successful exploit...
CVE-2018-4006
An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig functionality. A non-root user is able to write a file anywhere on the system. A user with local access can use this vulnerability to raise their privileges to root. An attacker wou...
CVE-2018-4007
An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug...
CVE-2018-4005
An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the configureRoutingWithCommand function. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine for a successful...
EUVD-2018-15793
Malware in sbrugna...
EUVD-2018-15794
Malware in sbrugna...
EUVD-2018-15795
Malware in sbrugna...
EUVD-2018-15790
Malware in sbrugna...
EUVD-2018-15791
Malware in sbrugna...
EUVD-2018-15792
Malware in sbrugna...
EUVD-2023-34751
Malicious code in bioql PyPI...
CVE-2023-30328
An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...
CVE-2018-4008
An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the RunVpncScript command. The command takes a user-supplied script argument and executes it under root context. A user with local access can use this vulnerability to raise their privileges to roo...
CVE-2018-4009
An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of code signing. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine to successfully exploit th...
CVE-2023-30328
An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...
CVE-2023-30328
An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...
Authentication flaw
An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...
CVE-2023-30328
An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use...
CVE-2023-30328
CVE-2023-30328 describes an authentication bypass in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4. The root cause is a PID reuse issue in the helper, enabling attackers to bypass authentication. The vulnerability is rated CVSS v3.1 with base score 9.8 (CRITICAL), affecting...
PT-2023-22636 · Unknown · Shimo Vpn Client
Name of the Vulnerable Software and Affected Versions: Shimo VPN Client for macOS version 5.0.4 Description: An issue in the helper tool of Shimo VPN Client for macOS allows attackers to bypass authentication via PID re-use. Recommendations: For Shimo VPN Client for macOS version 5.0.4, update to...