1738 matches found
CVE-2023-41973
ZSATray passes the previousInstallerName as a config parameter to TrayManager, and TrayManager constructs the path and appends previousInstallerName to get the full path of the exe. Fixed Version: Win ZApp 4.3.0.121 and later...
CVE-2023-41969
An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later...
CVE-2023-41973 Lack of input santization on Zscaler Client Connector enables arbitrary code execution
ZSATray passes the previousInstallerName as a config parameter to TrayManager, and TrayManager constructs the path and appends previousInstallerName to get the full path of the exe. Fixed Version: Win ZApp 4.3.0.121 and later...
CVE-2023-41973 Lack of input santization on Zscaler Client Connector enables arbitrary code execution
ZSATray passes the previousInstallerName as a config parameter to TrayManager, and TrayManager constructs the path and appends previousInstallerName to get the full path of the exe. Fixed Version: Win ZApp 4.3.0.121 and later...
CVE-2023-41973
The CVE-2023-41973 affects Zscaler Client Connector (ZSATray) on Windows, where a config parameter previousInstallerName is passed to TrayManager. TrayManager then constructs a path by appending this value, enabling a potential path construction/assembly issue that can lead to executing a crafted...
CVE-2023-41972 Revert password check incorrect type validation
In some rare cases, there is a password type validation missing in Revert Password check and for some features it could be disabled. Fixed Version: Win ZApp 4.3.0.121 and later...
CVE-2023-41972
The CVE-2023-41972 issue affects Zscaler Client Connector/Win ZApp where a password-type validation is missing in the Revert Password check, and in some features this check could be disabled. Connected sources confirm vulnerable versions are prior to 4.3.0.121 and that the fixed version is 4.3.0....
CVE-2023-41969
The CVE-2023-41969 entry describes an arbitrary file deletion vulnerability in ZSATrayManager used by Zscaler Client Connector (Win ZApp). Affected component is ZSATrayManager within Zscaler ZApp prior to version 4.3.0; the underlying issue is that it protects the temporary encrypted ZApp issue r...
CVE-2023-41969 ZSATrayManager Arbitrary File Deletion
An arbitrary file deletion in ZSATrayManager where it protects the temporary encrypted ZApp issue reporting file from the unprivileged end user access and modification. Fixed version: Win ZApp 4.3.0 and later...
PT-2024-13025 · Win Zapp · Win Zapp
Name of the Vulnerable Software and Affected Versions: Win ZApp versions prior to 4.3.0.121 Description: The issue is related to a missing password type validation in the Revert Password check. This could be disabled for some features, potentially leading to security issues. Recommendations: For...
PT-2024-13022 · Win Zapp · Win Zapp
Name of the Vulnerable Software and Affected Versions: Win ZApp versions prior to 4.3.0 Description: The issue is related to an arbitrary file deletion in ZSATrayManager, which is responsible for protecting the temporary encrypted ZApp issue reporting file from unprivileged end user access and...
CVE-2023-41972: Improper Handling of Insufficient Permissions or Privileges
In some rare cases, there is a password type validation missing in Revert Password check and for some features it could be disabled. Fixed Version: Win ZApp 4.3.0.121 and later...
Malicious code in win-regi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccc75e5c2e245bb5cc93616df8345a066ad6a7b060d605404d8036f4a272b45b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1151 Malicious code in win-regi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccc75e5c2e245bb5cc93616df8345a066ad6a7b060d605404d8036f4a272b45b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
The vulnerability of the pvr2_context_disconnect() function in the drivers/media/usb/pvrusb2/pvrusb2-context.c file of the Hauppauge WinTV-PVR USB2 driver for the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pvr2contextdisconnect function in the drivers/media/usb/pvrusb2/pvrusb2-context.c file of the Hauppauge WinTV-PVR USB2 driver’s Linux kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the...
BIT-PYTHON-2020-8315
In Python CPython 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected...
SMB Fetch, Windows x64 Pingback, Reverse TCP Inline
Fetch and execute an x64 payload from an SMB server. Connect back to attacker and report UUID Windows x64 Module Options msf use payload/cmd/windows/smb/x64/pingbackreversetcp msf payloadpingbackreversetcp show actions ...actions... msf payloadpingbackreversetcp set ACTION msf...
Malicious code in nan-win (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a48d06bf13608fbfa08f52c2b2b909075ad70973b7c46be713c54367decc178c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-963 Malicious code in nan-win (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a48d06bf13608fbfa08f52c2b2b909075ad70973b7c46be713c54367decc178c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...