8275 matches found
CVE-2022-4457
The CVE-2022-4457 issue concerns the WARP client for Android, where a misconfiguration in the app manifest enables a task hijacking attack. This could let a malicious app hijack legitimate apps and potentially exfiltrate sensitive data when installed on a victim’s device. Documented details acros...
CVE-2022-4457
Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...
Australian Healthcare Sector Targeted in Latest Gootkit Malware Attacks
A recent wave of Gootkit malware loader attacks has targeted the Australian healthcare sector by leveraging legitimate tools like VLC Media Player. Gootkit, also called Gootloader, is known to employ search engine optimization SEO poisoning tactics aka spamdexing for initial access. It typically...
Microsoft Windows Multiple Vulnerabilities (KB5022352)
This host is missing an important security update according to Microsoft KB5022352 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2022-4457: Exposure of Sensitive Information to an Unauthorized Actor
Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...
Cloudflare WARP 安全漏洞
Cloudflare WARP Cloudflare Vpn is a client application for secure connections from Cloudflare, Inc. in the United States. Cloudflare WARP suffers from a security vulnerability that stems from a misconfiguration in its client's manifest file that could allow an attacker to implement execution task...
PT-2023-14506 · Unknown · Warp Client For Android
Name of the Vulnerable Software and Affected Versions: WARP client for Android affected versions not specified Description: The issue is caused by a misconfiguration in the manifest file of the WARP client for Android, allowing a task hijacking attack. An attacker can create a malicious mobile...
CVE-2023-21541
Windows Task Scheduler Elevation of Privilege Vulnerability...
CVE-2023-21541
Windows Task Scheduler Elevation of Privilege Vulnerability...
CVE-2023-21541
Windows Task Scheduler Elevation of Privilege Vulnerability...
Privilege escalation
Windows Task Scheduler Elevation of Privilege Vulnerability...
Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities
Microsoft released its monthly security update on Tuesday, disclosing 98 vulnerabilities. Of these vulnerabilities, 11 are classified as "Critical", 87 are classified as "Important", no vulnerability classified as "Moderate." According to Microsoft all "Critical" vulnerability are either less...
Windows Task Scheduler Elevation of Privilege Vulnerability
...
Microsoft Windows Task Scheduler 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Task Scheduler. An attacker can exploit the vulnerability to elevate privileges...
KLA20158 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information. Below is a complete list of...
Microsoft PowerShell Remote Code Execution Vulnerability
PowerShell is a task automation and configuration management framework developed by Microsoft Corporation USA, consisting of a command line interface shell layer related manuscript language built from . exploit this vulnerability to bypass sandbox restrictions and execute arbitrary code on the...
PT-2023-1138 · Microsoft · Windows Task Scheduler +1
Name of the Vulnerable Software and Affected Versions: Windows Task Scheduler affected versions not specified Description: The issue is related to insufficient access control in the Windows Task Scheduler, which can be exploited to elevate privileges. This allows an attacker to affect the system...
CVE-2023-21541 Windows Task Scheduler Elevation of Privilege Vulnerability
...
