Proofpoint Insider Threat Management Windows Agent code-related vulnerabilities

Proofpoint Insider Threat Management Server is a server-side application from Proofpoint, Inc. for preventing malicious operations by enterprise insiders. A remote code execution vulnerability exists in the WriteWindowMouse API in Proofpoint Insider Threat Management Server versions prior to 7.9....

Wynis - Audit Windows Security With Best Practice

Just a powershell scripts for auditing security with CIS BEST Practices Windows 10 and Window Server 2016 You just need to run the script, it will create a directory named : AUDITCONF%DATE% The directory output will contain the files belows: -Antivirus-%COMPUTERNAME% : List installed Antivirus...

CVE-2020-27154

The chat window of Mitel BusinessCTI Enterprise MBC-E Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gain access to user information by sending arbitrary code, due to improper input validation. A successful exploit could allow an attacker to view the user...

Mitel BusinessCTI Enterprise Client Input Validation Error Vulnerability

Mitel Networks BusinessCTI Enterprise is an employee communication software for attendance management and instant messaging from Mitel Networks Canada. An input validation error vulnerability exists in the Windows-based Mitel BusinessCTI Enterprise MBC-E Client Chat Window versions prior to 6.4.1...

PT-2020-16642

Name of the Vulnerable Software and Affected Versions Mitel BusinessCTI Enterprise MBC-E Client for Windows versions prior to 6.4.11 Mitel BusinessCTI Enterprise MBC-E Client for Windows versions 7.x prior to 7.0.3 Description The issue is related to improper input validation in the chat window,...

CVE-2020-0475

In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0475

In createInputConsumer of WindowManagerService.java, there is a possible way to block and intercept input events due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

xorg-x11-server bug fix and enhancement update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Bug Fixes and Enhancements: DELL 8.2 BUGThe modesetting driver does not gracefully handle missing connectors on EnterVT...

CVE-2020-0099

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0099

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Default configuration

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0099

CVE-2020-0099 affects Android 8.0–10 and involves the WindowManagerService.addWindow, with an insecure default value enabling a possible window overlay attack (tapjacking) leading to local privilege escalation. Exploitation requires user interaction in the documented reports, and the issue is cat...

CVE-2020-0099

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0099

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

CVE-2020-0099: Initialization of a Resource with an Insecure Default

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Use-After-Free

sqlite3 is vulnerable to use-after-free. The vulnerability exists in resetAccumulator in select.c due to the parse tree rewrite for window functions is too late...

CVE-2020-7335

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

CVE-2020-7335

Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection MTP prior to 16.0.29 allows local users to gain elevated privileges via careful manipulation of a folder by creating a junction link. This exploits a lack of protection through a timing issue and is only...

ASB-A-141745510

In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. This could lead to local escalation of privilege via tapjacking with no additional execution privileges needed. User interaction is needed for exploitation...

xorg-x11-server buffer error vulnerability

xorg-x11-server is an X Window System display server from the X.Org X.org Foundation. X.Org Server suffers from a buffer error vulnerability that can be exploited by an attacker who can trigger a buffer overflow via XkbSetDeviceInfo to trigger a denial of service and possibly run code...