Lucene search
+L

1355 matches found

BDU FSTEC
BDU FSTEC
•added 2022/03/28 12:00 a.m.•19 views

The vulnerability of the installer component of the WPS Office office software package allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the installer component of the WPS Office office software package is related to the loading of a non-existent dynamic library, shcore.dll. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7.8CVSS7.5AI score0.00825EPSS
SaveExploits0References5Affected Software1
The Hacker News
The Hacker News
•added 2022/03/24 1:16 p.m.•57 views

Chinese APT Hackers Targeting Betting Companies in Southeast Asia

A Chinese-speaking advanced persistent threat APT has been linked to a new campaign targeting gambling-related companies in South East Asia, particularly Taiwan, the Philippines, and Hong Kong. Cybersecurity firm Avast dubbed the campaign Operation Dragon Castling, describing its malware arsenal ...

9.8CVSS2.2AI score0.2047EPSS
SaveExploits2
OSV
OSV
•added 2022/03/23 10:15 p.m.•15 views

CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

9.8CVSS8.1AI score0.2047EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2022/03/23 10:15 p.m.•23 views

CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

9.8CVSS6.4AI score0.2047EPSS
SaveExploits2References3
NVD
NVD
•added 2022/03/23 10:15 p.m.•33 views

CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

9.8CVSS0.2047EPSS
SaveExploits2References2
Prion
Prion
•added 2022/03/23 10:15 p.m.•35 views

Remote code execution

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

7.5CVSS9.7AI score0.2047EPSS
SaveExploits2References2Affected Software1
CVE
CVE
•added 2022/03/23 9:19 p.m.•143 views

CVE-2022-24934

Summary: CVE-2022-24934 affects Kingsoft WPS Office’s wpsupdater.exe up to version 11.2.0.10382. The issue allows remote code execution by modifying the HKEY_CURRENT_USER registry. Various sources (NVD, Red Hat, CVE lists, PT Security advisory) corroborate the impact and affected component. The r...

9.8CVSS9.7AI score0.2047EPSS
SaveIn wildExploits2References2Affected Software1
Cvelist
Cvelist
•added 2022/03/23 9:19 p.m.•46 views

CVE-2022-24934

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

10AI score0.2047EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2022/03/23 12:00 a.m.•49 views

PT-2022-2360 · Kingsoft · Kingsoft Wps Office

Name of the Vulnerable Software and Affected Versions: Kingsoft WPS Office versions 11.2.0.10382 and earlier Description: The issue is related to the wpsupdater.exe file in Kingsoft WPS Office, which allows remote code execution by modifying the HKEY CURRENT USER in the registry. This is due to...

10CVSS8.4AI score0.2047EPSS
SaveExploits2References14
CNNVD
CNNVD
•added 2022/03/23 12:00 a.m.•29 views

Kingsoft WPS 代码注入漏洞

Kingsoft WPS is a kind of office software from Kingsoft, a Chinese company. It provides document processing functions. A security vulnerability exists in wpsupdater.exe version 11.2.0.10382 and earlier versions of Kingsoft WPS Office, which originates from a vulnerability in wpsupdater.exe that...

9.8CVSS9.3AI score0.2047EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/23 12:00 a.m.•5 views

CVE-2022-24934: Undefined Security Weakness

wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEYCURRENTUSER in the registry...

9.8CVSS8.8AI score0.2047EPSS
SaveExploits2References1
OSV
OSV
•added 2022/03/17 6:15 p.m.•21 views

CVE-2022-26081

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer...

7.8CVSS7.6AI score0.00825EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/03/17 6:15 p.m.•12 views

CVE-2022-25969

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL or some other DLLs, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer...

7.8CVSS7.4AI score0.00825EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/03/17 6:15 p.m.•11 views

CVE-2022-26081

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer...

7.8CVSS7.4AI score0.00825EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/03/17 6:15 p.m.•16 views

CVE-2022-26511

WPS Presentation 11.8.0.5745 insecurely load d3dx941.dll when opening .pps files'current directory type' DLL loading...

7.8CVSS7.1AI score0.00634EPSS
SaveExploits0References3
OSV
OSV
•added 2022/03/17 6:15 p.m.•13 views

CVE-2022-25969

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL or some other DLLs, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer...

7.8CVSS7.6AI score0.00825EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/17 6:15 p.m.•29 views

CVE-2022-26511

WPS Presentation 11.8.0.5745 insecurely load d3dx941.dll when opening .pps files'current directory type' DLL loading...

7.8CVSS0.00634EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/17 6:15 p.m.•32 views

CVE-2022-25969

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL or some other DLLs, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer...

7.8CVSS0.00825EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/17 6:15 p.m.•38 views

CVE-2022-26081

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer...

7.8CVSS0.00825EPSS
SaveExploits0References2
Prion
Prion
•added 2022/03/17 6:15 p.m.•25 views

Directory traversal

WPS Presentation 11.8.0.5745 insecurely load d3dx941.dll when opening .pps files'current directory type' DLL loading...

6.8CVSS7.6AI score0.00634EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder