The vulnerability of the NoMachine remote access system, related to incorrect default access settings for the directory C:\ProgramData\NoMachine\var\uninstall, allows a intruder to execute arbitrary code.

The vulnerability of the NoMachine remote access system is related to incorrect default access settings for the directory C:\ProgramData\NoMachine\var\uninstall. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

[Updated April 3] 3CX desktop app used in a supply chain attack

Researchers have found that the 3CX desktop app may be compromised and used in supply chain attacks. The 3CX Desktop App is a Voice over Internet Protocol VoIP type of application which is available for Windows, macOS, Linux and mobile. Many large corporations use it internally to make calls, vie...

CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token Vulnerability

Exploit Title: CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token Exploit Author: Walter Oberacher, Raffaele Nacca, Davide Bianchin, Fortunato Lodari, Luca Bernardi Deda Cloud Cybersecurity Team Vendor Homepage: https://www.crowdstrike.com/ Author Homepage:...

CrowdStrike Falcon Agent 6.44.15806 Uninstall Issue

Exploit Title: CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token Date: 30/11/2022 Exploit Author: Walter Oberacher, Raffaele Nacca, Davide Bianchin, Fortunato Lodari, Luca Bernardi Deda Cloud Cybersecurity Team Vendor Homepage: https://www.crowdstrike.com/ Author Homepage...

3CX DesktopApp Malware

The version of the 3CX DesktopApp installed on the remote host contains malware. In the absence of a published vendor advisory, current guidance from 3CX and other sources is to uninstall this software and await an updated version to be published by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc...

CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token

Exploit Title: CrowdStrike Falcon AGENT 6.44.15806 - Uninstall without Installation Token Date: 30/11/2022 Exploit Author: Walter Oberacher, Raffaele Nacca, Davide Bianchin, Fortunato Lodari, Luca Bernardi Deda Cloud Cybersecurity Team Vendor Homepage: https://www.crowdstrike.com/ Author Homepage...

CVE-2023-20955

In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2023-20955

In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2023-20955

In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

PT-2023-17743 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: In the onPrepareOptionsMenu method of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications for all users due to a missing...

VulnCheck KEV: CVE-2019-19609

The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel, because it does not sanitize the plugin name, and attackers can inject arbitrary shell commands to be executed by the execa function...

Redirection < 1.1.5 - Plugin Reset via CSRF

The plugin does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete all the redirections through a CSRF attack. PoC https://example.com/wp-admin/admin-post.php?action=iruninstall...

MAL-2023-195 Malicious code in cms-ui-redux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b762909fe644f0cec406dc5042d82e4b93fda0f4259313f2884b3cf4ed92cce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-189 Malicious code in cms-models (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7660bdda7ac53c4bd35a3b5698ca80b7d2f5bf8bd47a5e7e6163aead683350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-24579

McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the command prompt...

CVE-2023-24579

McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the command prompt...

McAfee Total Protection 安全漏洞

McAfee Total Protection MTP is a suite of antivirus software from McAfee, Inc. in the United States. A security vulnerability exists in McAfee Total Protection prior to version 16.0.51, which originated from a vulnerability that allows an attacker to trick a victim into uninstalling an applicatio...

CVE-2023-24579

CVE-2023-24579 concerns McAfee Total Protection prior to 16.0.51. The vulnerability allows a local attacker to trick a user into uninstalling the product via the command prompt. The description does not include specific exploit details, affected components, or remediation steps in the provided do...

Intel® Glorp Advisory

Summary: A potential security vulnerability in the Intel® Glorp software may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Glorp software. Vulnerability Details: CVEID:...

Intel® System Defense Utility Vulnerability Advisory

Summary: A potential security vulnerability in the Intel® System Defense Utility all versions may allow for a denial of service. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation notice for the System Defense Utility. Vulnerability...