Lucene search
+L

1586 matches found

Cvelist
Cvelist
added 2020/07/24 9:24 p.m.33 views

CVE-2020-8207

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running...

9.2AI score0.02062EPSS
SaveExploits0References1
Pen Test Partners Blog
Pen Test Partners Blog
added 2020/07/21 3:27 p.m.155 views

Raining SYSTEM Shells with Citrix Workspace app

TL;DR Citrix Workspace is vulnerable to a remote command execution attack running under the context of the SYSTEM account. By sending a crafted message over a named pipe and spoofing the client process ID, the Citrix Workspace Updater Service can be tricked into executing an arbitrary process und...

7.2CVSS8.1AI score0.02062EPSS
SaveExploits2
CNVD
CNVD
added 2020/05/22 12:00 a.m.13 views

Splashtop Software Updater Code Issue Vulnerability

Splashtop Software Updater is a software update application for Splashtop products from Splashtop USA. A security vulnerability exists in Splashtop Software Updater prior to version 1.5.6.16 in Splashtop Streamer prior to 3.3.8.0 and Splashtop Business prior to 3.3.8.0. An attacker can exploit th...

6.6CVSS6.8AI score0.0055EPSS
SaveExploits1References1
OSV
OSV
added 2020/05/21 5:15 p.m.13 views

CVE-2020-12431

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

6.6CVSS6.7AI score0.0055EPSS
SaveExploits1References2
NVD
NVD
added 2020/05/21 5:15 p.m.20 views

CVE-2020-12431

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

6.6CVSS6.6AI score0.0055EPSS
SaveExploits1References2
Prion
Prion
added 2020/05/21 5:15 p.m.21 views

Privilege escalation

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

6.3CVSS6.6AI score0.0055EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2020/05/21 4:16 p.m.22 views

CVE-2020-12431

A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT AUTHORITY/SYSTEM, by forcing a permission change to any Splashtop files and directories, with...

6.6AI score0.0055EPSS
SaveExploits1References2
CVE
CVE
added 2020/05/21 4:16 p.m.1453 views

CVE-2020-12431

The CVE-2020-12431 entry describes a Windows local privilege escalation in Splashtop Software Updater (before 1.5.6.16) due to insecure permissions on the updater’s configuration file and a named pipe, enabling a forced permission change of Splashtop files/directories and DLL hijacking to achieve...

6.6CVSS6.6AI score0.0055EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2020/05/12 12:00 a.m.109 views

Pi-hole code issue vulnerability

Pi-hole is a web-grade ad-blocking application from Pi-hole.Gravity updater is an auto-updating plugin used in it. A code issue vulnerability exists in gravityDownloadBlocklistFromUrl in Gravity updater in Pi-hole 4.4 and prior versions. An attacker can exploit this vulnerability to write a PHP...

9CVSS7AI score0.78262EPSS
SaveExploits19References1
NVD
NVD
added 2020/05/11 3:15 p.m.19 views

CVE-2020-11108

The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing to a PHP file in the web directory. Also, it can be used in conjunction with the sudo rule for the www-data user to escalate privileges t...

9CVSS9.1AI score0.78262EPSS
SaveExploits19References6
OSV
OSV
added 2020/05/11 3:15 p.m.30 views

CVE-2020-11108

The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing to a PHP file in the web directory. Also, it can be used in conjunction with the sudo rule for the www-data user to escalate privileges t...

8.8CVSS7.7AI score
SaveExploits0References6
Prion
Prion
added 2020/05/11 3:15 p.m.29 views

Design/Logic Flaw

The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing to a PHP file in the web directory. Also, it can be used in conjunction with the sudo rule for the www-data user to escalate privileges t...

9CVSS9AI score0.78262EPSS
SaveExploits19References6Affected Software1
Cvelist
Cvelist
added 2020/05/11 2:42 p.m.33 views

CVE-2020-11108

The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing to a PHP file in the web directory. Also, it can be used in conjunction with the sudo rule for the www-data user to escalate privileges t...

9.1AI score0.78262EPSS
SaveExploits19References6
CVE
CVE
added 2020/05/11 2:42 p.m.235 views

CVE-2020-11108

CVE-2020-11108 affects Pi-hole 4.4 and earlier, via the Gravity updater’s gravity_DownloadBlocklistFromUrl in gravity.sh. An authenticated attacker can upload arbitrary files, enabling remote code execution by writing a PHP file into the webroot. The issue can be leveraged for privilege escalatio...

9CVSS8.9AI score0.78262EPSS
SaveExploits19References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/05/11 12:00 a.m.32 views

CVE-2020-11108

The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files. This can be abused for Remote Code Execution by writing to a PHP file in the web directory. Also, it can be used in conjunction with the sudo rule for the www-data user to escalate privileges t...

9CVSS0.1AI score0.78262EPSS
SaveExploits19References7
CNVD
CNVD
added 2020/05/06 12:00 a.m.16 views

Avira Operations Avira Software Updater Privilege Vulnerability

Avira Operations Avira Software Updater is a software upgrade management tool for Avira products from Avira Operations. A power-up vulnerability exists in Avira Operations Avira Software Updater prior to version 2.0.6.27476, which stems from the program failing to properly handle hard links to...

7.8CVSS6.7AI score0.00448EPSS
SaveExploits0References1
OSV
OSV
added 2020/05/05 10:15 p.m.6 views

CVE-2020-12463

An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files...

7.8CVSS7.2AI score0.00448EPSS
SaveExploits0References1
NVD
NVD
added 2020/05/05 10:15 p.m.15 views

CVE-2020-12463

An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files...

7.8CVSS7.6AI score0.00448EPSS
SaveExploits0References1
Prion
Prion
added 2020/05/05 10:15 p.m.19 views

Privilege escalation

An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files...

4.6CVSS7.5AI score0.00448EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/05/05 9:18 p.m.84 views

CVE-2020-12463

Avira Software Updater prior to 2.0.6.27476 is affected by an elevation of privilege due to improper handling of file hard links. This allows local users to take control of arbitrary files. CVSSv3.1 base score 7.8 (LOCAL, HIGH impact on confidentiality/integrity/availability); no exploit details ...

7.8CVSS7.6AI score0.00448EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder