Lucene search
+L

76 matches found

Schneier on Security
Schneier on Security
added 2025/04/28 6:17 p.m.19 views

Windscribe Acquitted on Charges of Not Collecting Users’ Data

The company doesn't keep logs, so couldn't turn over data: Windscribe, a globally used privacy-first VPN service, announced today that its founder, Yegor Sak, has been fully acquitted by a court in Athens, Greece, following a two-year legal battle in which Sak was personally charged in connection...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/05 11:41 p.m.21 views

CVE-2022-41141

This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...

7.8CVSS7.1AI score0.0037EPSS
SaveExploits0References1
NVD
NVD
added 2024/08/21 5:15 p.m.36 views

CVE-2024-6141

Windscribe Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

7.8CVSS0.00591EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/08/21 4:10 p.m.16 views

CVE-2024-6141 Windscribe Directory Traversal Local Privilege Escalation Vulnerability

Windscribe Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

7.8CVSS7.2AI score0.00591EPSS
SaveExploits0References2
CVE
CVE
added 2024/08/21 4:10 p.m.174 views

CVE-2024-6141

The CVE-2024-6141 issue is a local privilege escalation in Windscribe due to directory traversal in the Windscribe Service. The root cause is failure to validate a user-supplied path before file operations, enabling an attacker who can run low-privileged code to escalate to SYSTEM and execute arb...

7.8CVSS7.8AI score0.00591EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2024/08/21 4:10 p.m.29 views

CVE-2024-6141 Windscribe Directory Traversal Local Privilege Escalation Vulnerability

Windscribe Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

7.8CVSS0.00591EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/21 4:10 p.m.14 views

CVE-2024-6141 Windscribe Directory Traversal Local Privilege Escalation Vulnerability

Windscribe Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

7.8CVSS7.5AI score0.00591EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/07/03 12:0 a.m.13 views

The vulnerability of the Windscribe Service VPN client, which allows a violator to enhance their privileges

The vulnerability of the Windscribe Service VPN-client relates to an incorrect restriction on the path to the restricted access catalog. Exploiting this vulnerability can allow a hacker to increase their privileges...

7.8CVSS7.2AI score0.00591EPSS
SaveExploits0References5Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2024/06/20 12:0 a.m.20 views

Windscribe Directory Traversal Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windscribe Service. T...

7.8CVSS7.5AI score0.00591EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/05/30 12:0 a.m.10 views

PT-2024-4470 · Windscribe · Windscribe

Name of the Vulnerable Software and Affected Versions: Windscribe affected versions not specified Description: The issue is related to a directory traversal vulnerability in the Windscribe Service, which can be exploited by local attackers to escalate privileges on affected installations of...

7.8CVSS7.6AI score0.00591EPSS
SaveExploits0References9
Openbugbounty
Openbugbounty
added 2023/02/17 1:11 p.m.26 views

windscribe.com Cross Site Scripting vulnerability OBB-3196943

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
added 2023/01/26 6:59 p.m.8 views

CVE-2022-41141

This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...

7.8CVSS6.2AI score0.0037EPSS
SaveExploits0References2
NVD
NVD
added 2023/01/26 6:59 p.m.36 views

CVE-2022-41141

This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...

7.8CVSS7.8AI score0.0037EPSS
SaveExploits0References2
Prion
Prion
added 2023/01/26 6:59 p.m.27 views

Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...

4.3CVSS7.8AI score0.0037EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/26 12:0 a.m.7 views

CVE-2022-41141

This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...

7.8CVSS7.4AI score0.0037EPSS
SaveExploits0References2
CVE
CVE
added 2023/01/26 12:0 a.m.396 views

CVE-2022-41141

Windscribe VPN on Windows is affected by CVE-2022-41141, where OpenSSL loads a configuration file from an unsecured location. This enables local attackers who can run low-privilege code to escalate to SYSTEM and execute arbitrary code. The issue is documented by ZDI-22-1300 and is reflected acros...

7.8CVSS7.8AI score0.0037EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/01/26 12:0 a.m.9 views

Windscribe VPN 代码问题漏洞

Windscribe VPN is an application from Windscribe Canada. A VPN. Windscribe VPN suffers from a security vulnerability that stems from loading an OpenSSL configuration file from an insecure location...

7.8CVSS7.3AI score0.0037EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/01/26 12:0 a.m.47 views

CVE-2022-41141

This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...

7.8CVSS8AI score0.0037EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/09/26 12:0 a.m.10 views

PT-2022-25671 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: Windscribe affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order...

7.8CVSS7.8AI score0.0037EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2022/09/26 12:0 a.m.36 views

Windscribe Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...

7.8CVSS4.8AI score0.0037EPSS
SaveExploits0References1
Rows per page
Query Builder