EUVD-2024-33163

Malicious code in bioql PyPI...

CVE-2024-10526: Files or Directories Accessible to External Parties

Rapid7 Velociraptor MSI Installer versions below 0.73.3 suffer from a vulnerability whereby it creates the installation directory with WRITEDACL permission to the BUILTIN\Users group. This allows local users who are not administrators to grant themselves the Full Control permission on...