The vulnerability of the ProtonVPN Service software, a VPN service for accessing ProtonVPN, allows a perpetrator to execute arbitrary code with SYSTEM privileges.

The vulnerability of the ProtonVPN service is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with SYSTEM privileges using a single OpenVPN command line...

Flexera Software FlexNet Publisher Licensing Service Arbitrary Code Execution Vulnerability

Flexera Software FlexNet Publisher formerly known as FLEXlm is the software license management core component of the Entitlement Relationship Management Solution from Flexera Software. FlexNet Publisher Licensing Service is a software license activation verification service. A security...

Apple macOS High Sierra memory corruption vulnerability (CNVD-2018-12245)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Windows Server is one of the Window Server components. A security vulnerability exists in the Windows Server component of Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be...

CVE-2018-11479

The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe system process that establishes a \.\pipe\WindscribeService named pipe endpoint that allows the Windscribe VPN process to connect and execute an OpenVPN process or other processe...

CVE-2018-9091

CVE-2018-9091 affects Kemp LoadMaster LMOS versions 6.0.44–7.2.41.2 and LMOS LTS prior to 7.1.35.5. The root cause is a session-management flaw that enables an unauthenticated, remote attacker to bypass protections, gain system privileges, and run elevated commands (e.g., ls, ps, cat), potentiall...

PT-2018-10598 · Windscribe +1 · Windscribe +1

Name of the Vulnerable Software and Affected Versions: Windscribe version 1.81 Description: The issue concerns the VPN component in Windscribe, which uses the OpenVPN client and creates a system process named WindScribeService.exe. This process establishes a named pipe endpoint,...

CVE-2018-10722

In Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges because users have Modify access to the %PROGRAMFILES%\Cylance\Desktop\log folder, the CyUpdate process grants users Modify access to new files created in this folder, and a new file can be a symlink...

CVE-2018-10722

CVE-2018-10722 concerns CylancePROTECT (pre-1470) where an unprivileged local user can escalate to SYSTEM due to overly permissive access to the log folder under %PROGRAMFILES%\Cylance\Desktop\log. The CyUpdate process grants users Modify rights to new files created there, allowing a symlink chai...

CVE-2018-10722

In Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges because users have Modify access to the %PROGRAMFILES%\Cylance\Desktop\log folder, the CyUpdate process grants users Modify access to new files created in this folder, and a new file can be a symlink...

Golden Frog VyprVPN for Windows Privilege Exploit

Golden Frog VyprVPN for Windows is a suite of VPN software for the Windows platform. A privilege extraction vulnerability exists in Golden Frog VyprVPN version 2.12.1.8015 for Windows-based platforms, which originates when the VyprVPN service creates a NetNamedPipe endpoint that allows an install...

Windows - Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits include "stdafx.h" define PML4BASE 0xFFFFF6FB7DBED000 define PDPBASE 0xFFFFF6FB7DA00000 define PDBASE 0xFFFFF6FB40000000 define PTBASE 0xFFFFF68000000000 typedef LARGEINTEGER PHYSICALADDRESS, PPHYSICALADDRESS; pragma packpush,4 typedef struc...

CVE-2018-10645

Golden Frog VyprVPN 2.12.1.8015 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "VyprVPN" service. This service establishes a NetNamedPipe endpoint that allows applications to connect and call publicly exposed methods. The "SetProperty" method allows an attacker t...

Apple macOS High Sierra Security Code Execution Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple Inc. for Mac computers.Security is one of the security components. A security vulnerability exists in the Security component of Apple macOS High Sierra versions prior to 10.13.1. The vulnerability can be exploited by an...

Apple macOS High Sierra Touch Bar Support Memory Corruption Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Touch Bar Support is one of the Touch Bar support components. A security vulnerability exists in the Touch Bar Support component in Apple macOS High Sierra versions prior to 10.13.3. An attacker can...

AMD Driver Installer and Gaming Evolved Product plays.tv Service Code Execution Vulnerability

AMD driver-installation packages and Gaming Evolved products are both products of AMD, Inc. AMD driver-installation packages are a set of driver installation packages for AMD graphics cards. Gaming Evolved products are game optimization products. plays.tv is one of the game recording and sharing...

CVE-2018-10169

ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "ProtonVPN Service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "Connect" method accepts a...

Kernel Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2018-08247)

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. kernel is a...

The vulnerability of the Microsoft Malware Protection Engine’s protection module against malicious programs arises from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft Malware Protection Engine’s protection module mpengine.dll is related to insufficient input data validation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges using a specially crafted rar file...

CVE-2017-13288

In writeToParcel and readFromParcel of PeriodicAdvertisingReport.java, there is a permission bypass due to a 64/32bit int mismatch. This could lead to a local escalation of privilege where the user can start an activity with system privileges, with no additional execution privileges needed. User...

Google Android System Elevation of Privilege Vulnerability (CNVD-2018-07452)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation vulnerability exists in the writeToParcel and readFromParcel of the PeriodicAdvertisingReport.java file in Android versions 8.0 and 8.1. A local attacker can exploit...