185 matches found
CVE-2025-34352
CVE-2025-34352 affects JumpCloud Remote Assist for Windows prior to v0.317.0. The Windows agent’s uninstaller runs with NT AUTHORITY\SYSTEM privileges and writes/deletes in a user-writable %TEMP% subdirectory without validating trust or ACLs. An attacker who pre-creates the temp directory (with w...
CVE-2025-34352 JumpCloud Remote Assist < 0.317.0 Arbitrary File Write/Delete via Insecure Temp Directory
JumpCloud Remote Assist for Windows versions prior to 0.317.0 include an uninstaller that is invoked by the JumpCloud Windows Agent as NT AUTHORITY\SYSTEM during agent uninstall or update operations. The Remote Assist uninstaller performs privileged create, write, execute, and delete actions on...
JumpCloud Remote Assist 安全漏洞
JumpCloud Remote Assist is a remote access module from JumpCloud USA. A security vulnerability exists in JumpCloud Remote Assist versions prior to 0.317.0 that stems from the uninstaller performing privileged operations without verifying directory trust, which could result in arbitrary file write...
PT-2025-48748
Name of the Vulnerable Software and Affected Versions JumpCloud Remote Assist for Windows versions prior to 0.317.0 Description JumpCloud Remote Assist for Windows includes an uninstaller that operates with high privileges during agent uninstall or update operations. The uninstaller performs file...
EUVD-2019-16125
Malware in sbrugna...
EUVD-2021-19649
Malware in sbrugna...
EUVD-2014-9456
Malware in sbrugna...
EUVD-2009-2949
Malware in sbrugna...
EUVD-2012-3295
Malware in sbrugna...
EUVD-2020-28402
Malware in sbrugna...
EUVD-2021-24175
Malware in sbrugna...
EUVD-2021-9207
Malicious code in bioql PyPI...
EUVD-2023-41280
Malicious code in bioql PyPI...
EUVD-2022-39127
Malicious code in bioql PyPI...
EUVD-2023-58498
Malicious code in bioql PyPI...
EUVD-2022-32699
Malicious code in bioql PyPI...
Google Android elevation of privilege vulnerability (CNVD-2025-23044)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a missing privilege check in the onCreate function in UninstallerActivity.java. An attacker can exploit this vulnerability to gain elevated privileg...
CVE-2025-0087
In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-0087
In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-0087
In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...