2030 matches found
msiscan
MSI Analyzer This Python script for Linux can analyze Microsoft Windows .msi Installer files and point out potential vulnerabilites. It was developed by Michael Baer @derbaer0 in the SEC Consult Vulnerability Lab. Currently, it is mostly suited for a local privilege escalation also described in o...
CVE-2020-0683
CVE-2020-0683 Original Poc sent to MSRC. Assigned to CVE-2020-0683 - Windows Installer Elevation of Privilege https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2020-0683 Source code for Visual Studio C++ 2017 Please read the PDF that describes all the findings and steps to...
SetupHijack
SetupHijack Overview SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or updaters drop files in %TEMP% or other world-writable locations, allowing an attacke...
CVE-2023-20178
CVE-2023-20178 This is PoC for Arbitrary File Delete vulnerability in Cisco Secure Client tested on 5.0.01242 and Cisco AnyConnect tested on 4.10.06079. When a user connect to vpn, vpndownloader.exe process is started in background and it will create directory in c:\windows\temp with default...
CVE-2026-126622
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated user to run code as the administrator who runs setup, when the server is installed into a program folder that is already there and that accounts other than the administrators...
CVE-2026-126624
Unverified ownership in the Windows installer of Progressive Robot hMailServer 6.3.7 allows a local authenticated user to run code as the mail server's service account or as an administrator when setup installs into, or upgrades, a program folder that accounts other than the administrators could...
CVE-2026-126625
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated user to run code as the administrator who installs the product, when it is installed into a new program folder in a location whose permissions let every user write, such as th...
CVE-2026-126625
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated user to run code as the administrator who installs the product, when it is installed into a new program folder in a location whose permissions let every user write, such as th...
CVE-2026-126625
The Progressive Robot hMailServer 6.3.7 Windows installer contains a vulnerability where incorrect default permissions allow a local authenticated user to execute code as an administrator. This occurs when the software is installed in a location with loose permissions, such as the root of a drive...
EUVD-2026-123330
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated user to run code as the administrator who installs the product, when it is installed into a new program folder in a location whose permissions let every user write, such as th...
CVE-2026-126624
Unverified ownership in the Windows installer of Progressive Robot hMailServer 6.3.7 allows a local authenticated user to run code as the mail server's service account or as an administrator when setup installs into, or upgrades, a program folder that accounts other than the administrators could...
EUVD-2026-123329
Unverified ownership in the Windows installer of Progressive Robot hMailServer 6.3.7 allows a local authenticated user to run code as the mail server's service account or as an administrator when setup installs into, or upgrades, a program folder that accounts other than the administrators could...
CVE-2026-126624
Progressive Robot hMailServer version 6.3.7 contains a vulnerability related to Unverified Ownership in its Windows installer. A local authenticated user can execute arbitrary code as the mail server's service account (LocalSystem or its virtual account) or as an administrator. This occurs when t...
CVE-2026-126622
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated user to run code as the administrator who runs setup, when the server is installed into a program folder that is already there and that accounts other than the administrators...
EUVD-2026-123327
Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated user to run code as the administrator who runs setup, when the server is installed into a program folder that is already there and that accounts other than the administrators...
CVE-2026-126622
Progressive Robot hMailServer 6.3.7 contains a vulnerability where incorrect default permissions in the Windows installer allow a local authenticated user to execute code with administrator privileges . This occurs during installation, upgrade, or repair if the software is placed into a pre-exist...
CVE-2026-126612
Progressive Robot hMailServer versions 6.0.0 through 6.3.7 are vulnerable to Improper Link Resolution Before File Access (CWE-59) in the Windows installer. A local authenticated user can execute arbitrary code as the mail server's service account (LocalSystem or virtual account) or as an administ...
EUVD-2026-123325
Improper link resolution in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.7 allows a local authenticated user to run code as the mail server's service account or as an administrator when the path to the program folder passes through a junction, a symbolic link or a moun...
ShokoServer System - Local File Inclusion (LFI)
ShokoServer is a media server which specializes in organizing anime. In affected versions the /api/Image/WithPath endpoint is accessible without authentication and is supposed to return default server images. The endpoint accepts the parameter serverImagePath, which is not sanitized in any way...