Foxit PDF Editor < 11.2.8 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 11.2.8. It is, therefore affected by multiple vulnerabilities: - A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D...

GHSA-C24V-8RFC-W8VW Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem

Summary Vite dev server option server.fs.deny can be bypassed on case-insensitive file systems using case-augmented versions of filenames. Notably this affects servers hosted on Windows. This bypass is similar to https://nvd.nist.gov/vuln/detail/CVE-2023-34092 -- with surface area reduced to host...

Citrix Virtual Apps and Desktops RCE (CTX583930)

The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is affected by a remote code execution vulnerability. A remote, authenticated attacker must possess admin privileges to the Session Recording server, if exploited, may result in an authenticated user being able t...

Security Update for Microsoft .NET Core SDK (CVE-2024-0057)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the January 2024 advisory. - .Net Core Security Feature Bypass Vulnerability CVE-2024-0057 Note that Nessus has not tested for these issues but has...

Google Chrome < 120.0.6099.216 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 120.0.6099.216. It is, therefore, affected by a vulnerability as referenced in the 202401stable-channel-update-for-desktop9 advisory. - Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216...

Rockwell FactoryTalk Services Platform < 6.20 Privilege Escalation

The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is prior to 6.20. It is, therefore, affected by a vulnerability. - FactoryTalk Services Platform contains a vulnerability that may allow a remote, authenticated attacker to bypass FactoryTalk Security...

Google Chrome < 120.0.6099.200 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 120.0.6099.200. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop advisory. - Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a...

Plantronics Hub < 3.25.1 Privilege Escalation

The version of Plantronics Hub installed on the remote Windows host is prior to 3.25.1. It is, therefore, affected by a privilege escalation vulnerability in its updater system. Due to a race condition, a local attacker can set any permissions on arbitrary files on an affected device. This can be...

Google Chrome < 120.0.6099.130 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 120.0.6099.130. It is, therefore, affected by a vulnerability as referenced in the 202312stable-channel-update-for-desktop20 advisory. - Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a...

Mozilla Thunderbird < 115.6

The version of Thunderbird installed on the remote Windows host is prior to 115.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-55 advisory. - Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed...

Metasploit Weekly Wrap-Up: Dec. 15, 2023

Continuing the 12th Labor of Metasploit Metasploit continues its Herculean task of increasing our toolset to tame Kerberos by adding support for ASREP Roasting, which allows retrieving the password hashes of users who have Do not require Kerberos preauthentication set on the domain controller. Th...

Google Chrome < 120.0.6099.110 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 120.0.6099.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 202312stable-channel-update-for-desktop12 advisory. - Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a...

Adobe Prelude < 22.6.1 Memory leak (APSB23-67)

The version of Adobe Prelude installed on the remote Windows host is prior to 22.6.1. It is, therefore, affected by a vulnerability as referenced in the APSB23-67 advisory. - Adobe Prelude versions 22.6 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could lead t...

Adobe Dimension < 3.4.11 Multiple Memory leak (APSB23-71)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.11. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-71 advisory. - Adobe Dimension versions 3.4.10 and earlier are affected by an out-of-bounds read vulnerability that could lead...

Adobe Illustrator < 27.9.1 / 28.0 < 28.1 Multiple Arbitrary code execution (APSB23-68)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.9.1, 28.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-68 advisory. - Adobe Illustrator versions 28.0 and earlier and 27.9 and earlier are affected by a Use After Free...

Qlik Sense Enterprise HTTP Tunneling RCE

The version of Qlik Sense Enterprise installed on the remote Windows host is prior to November 2021 Patch 17, February 2022 prior to Patch 15, May 2022 prior to Patch 16, August 2022 prior to Patch 14, November 2022 prior to Patch 12, February 2023 prior to Patch 10, May 2023 prior to Patch 6 or...

CVE-2023-49694

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM...

CVE-2023-49694 NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM...

Mozilla Firefox ESR < 115.5.0

The version of Firefox ESR installed on the remote Windows host is prior to 115.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-50 advisory. - Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed...

Mozilla Thunderbird < 115.5.0

The version of Thunderbird installed on the remote Windows host is prior to 115.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-52 advisory. - On some systemsdepending on the graphics settings and driversit was possible to force an out-of-bounds read and...