CVE-2023-23423

creationtimestamp| type| source ---|---|--- 2023-04-13 18:02:40+00:00| published-proof-of-concept| Telegram/gyCoGHimPrHuJIO4PODdzGa-SbQUX3r8l5z0rakuXLR 2023-04-18 07:16:18+00:00| published-proof-of-concept| https://t.me/RespaldoHackingTeam/1337 2023-04-18 12:11:38+00:00| seen|...

CVE-2023-28246

Windows Registry Elevation of Privilege Vulnerability...

Privilege escalation

Windows Registry Elevation of Privilege Vulnerability...

CVE-2023-28246 Windows Registry Elevation of Privilege Vulnerability

...

Windows Registry Elevation of Privilege Vulnerability

...

PT-2023-2425 · Microsoft · Windows Registry +1

Name of the Vulnerable Software and Affected Versions: Windows Registry affected versions not specified Description: The issue is related to insufficient access control in the Windows Registry, which can be exploited to elevate privileges. This could allow an attacker to affect the system. There ...

Hackers Using Self-Extracting Archives Exploit for Stealthy Backdoor Attacks

An unknown threat actor used a malicious self-extracting archive SFX file in an attempt to establish persistent backdoor access to a victim's environment, new findings from CrowdStrike show. SFX files are capable of extracting the data contained within them without the need for dedicated software...

The vulnerability of the McAfee Total Protection antivirus protection, related to deficiencies in access control to the registry, allows a hacker to modify the Component Object Model (COM) in the Windows registry.

The vulnerability of the McAfee Total Protection antivirus protection lies in its lack of access control for accessing the registry. Exploiting this vulnerability could allow an attacker to modify the Component Object Model COM in the Windows registry...

CVE-2023-25134

McAfee Total Protection prior to 16.0.50 may allow an adversary with full administrative access to modify a McAfee specific Component Object Model COM in the Windows Registry. This can result in the loading of a malicious payload...

CVE-2023-25134

McAfee Total Protection prior to 16.0.50 may allow an adversary with full administrative access to modify a McAfee specific Component Object Model COM in the Windows Registry. This can result in the loading of a malicious payload...

McAfee Total Protection 安全漏洞

McAfee Total Protection MTP is a suite of antivirus software from McAfee, Inc. in the United States. A security vulnerability exists in McAfee Total Protection prior to version 16.0.50, which stems from a vulnerability that allows an attacker to modify the McAfee-specific component object model i...

CVE-2023-25134

Summary: CVE-2023-25134 affects McAfee Total Protection prior to 16.0.50. An adversary with full administrative access can modify a McAfee-specific COM in the Windows Registry, enabling loading of a malicious payload. Affected product/version: McAfee Total Protection pre-16.0.50. Root cause: insu...

PT-2023-2001 · Mcafee · Mcafee Total Protection

Name of the Vulnerable Software and Affected Versions: McAfee Total Protection versions prior to 16.0.50 Description: The issue is related to insufficient access control to the registry, allowing an adversary with full administrative access to modify a McAfee specific Component Object Model COM i...

CVE-2023-23420

creationtimestamp| type| source ---|---|--- 2023-03-14 19:23:25+00:00| seen| https://t.me/cibsecurity/59990 2023-04-08 17:23:56+00:00| published-proof-of-concept| Telegram/IlZBowUfOcjN5gg3PFQxnqtrh3VZ0A7x1GkPzaAIStVh1I 2023-04-13 18:02:40+00:00| published-proof-of-concept|...

CVE-2023-23421

creationtimestamp| type| source ---|---|--- 2023-03-14 19:23:18+00:00| seen| https://t.me/cibsecurity/59983 2023-04-13 18:02:40+00:00| published-proof-of-concept| Telegram/gyCoGHimPrHuJIO4PODdzGa-SbQUX3r8l5z0rakuXLR 2023-04-18 07:16:18+00:00| published-proof-of-concept|...

Windows Registry Enumerate Cached Accounts

Binary data windowsregistryenumcachedaccounts.nbin...

K20804356: Samba vulnerabilities CVE-2019-3870 and CVE-2019-3880

Security Advisory Description CVE-2019-3870 A vulnerability was found in Samba from version including 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the install location. This directory is typically mode 0700, that...

SUSE CVE-2017-15392

Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to potentially exploit heap corruption via a crafted Windows Registry entry, related to PlatformIntegration...

SUSE CVE-2019-9801

Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happen if the program has specifically registered itself as a "URL Handler" in the Windows registry...

SUSE CVE-2021-3622

A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to recursively call the getchildren function, leading to a stack overflow. The highest threat from this vulnerability is to system availability...