529 matches found
EulerOS 2.0 SP3 : samba (EulerOS-SA-2019-2018)
According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS...
samba: save registry file outside share as unprivileged user
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share...
Unauthorized File Write
samba is vulnerable to unauthorized file write. An improper implementation of the RPC endpoint that emulates the Windows registry service API allows an unprivileged attacker to create new registry hive file which can lead to creation of new files in the samba share...
EulerOS Virtualization for ARM 64 3.0.2.0 : samba (EulerOS-SA-2019-1708)
According to the version of the samba packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged...
The vulnerability of the CxUtilSvc component of the Synaptics Sound Device driver, which allows a hacker to increase their privileges in the Windows registry.
The vulnerability of the CxUtilSvc component of the Synaptics Sound Device driver is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges in the Windows registry by using the API...
EulerOS 2.0 SP5 : samba (EulerOS-SA-2019-1689)
According to the version of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this fl...
Hunting COM Objects (Part Two)
Background As a follow up to Part One in this blog series on COM object hunting, this post will talk about taking the COM object hunting methodology deeper by looking at interesting COM object methods exposed in properties and sub-properties of COM objects. What is a COM Object? According to...
CVE-2019-9730
Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API...
CVE-2019-9730
Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API...
Improper access control
Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API...
CVE-2019-9730
Incorrect access control in the CxUtilSvc component of the Synaptics Sound Device drivers prior to version 2.29 allows a local attacker to increase access privileges to the Windows Registry via an unpublished API...
CVE-2019-9730
CVE-2019-9730 concerns the Synaptics (formerly Conexant) Audio driver. Affected component is the CxUtilSvc/CxUtilSrv.exe within the Sound Device Driver, where an incorrect access control allows a local user to escalate privileges to the Windows Registry via an unpublished API. Impact: local privi...
CVE-2019-0881
creationtimestamp| type| source ---|---|--- 2019-05-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46912 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2025-05-23 05:00:00+00:00| seen|...
CB TAU Threat Intelligence Notification: Danabot Trojan Targets Financial Services Industry via Stolen Credentials
Summary Danabot is a banking trojan written in the Delphi programming language. Delivery methods are typically via phishing emails that contain malicious attachments, which further call out to download the main payload using PowerShell or VBScript. Danabot is modular in nature and has capabilitie...
Synaptics Audio Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-25822 Potential Impact: Privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-9730 Summary Description: Incorrect access control in the CxUtilSvc.exe component of the Synaptics previously Conexant Audio driver could allow a...
Synaptics Audio Driver Vulnerability - Lenovo Support US
No description provided...
Design/Logic Flaw
A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions...
CVE-2018-18466
An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credentials in cleartext in the logs present in the DEBUG folder that can be accessed by anyone. NOTE: The vendor disputes this as a vulnerability...
CVE-2018-18466
An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the application stores the emergency credentials in cleartext in the logs present in the DEBUG folder that can be accessed by anyone. NOTE: The vendor disputes this as a vulnerability...
Microsoft Windows .Reg File / Dialog Box Message Spoofing Exploit
The Windows registry editor allows specially crafted .reg filenames to spoof the default registry dialog warning box presented to an end user. This can potentially trick unsavvy users into choosing the wrong selection shown on the dialog box. Furthermore, we can deny the registry editor its abili...