Skype Windows desktop version suffers from dll hijacking vulnerability

Skype Desktop is a free voice communication program. Skype Desktop for Windows has a dll hijacking vulnerability that can be exploited by attackers to remotely control a user's computer or implant a Trojan horse...

XMind for Windows suffers from dll hijacking vulnerability

XMind is a mind mapping software that is also open source and cross-platform. XMind for Windows suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Multiple Veritas Product Security Vulnerabilities

Veritas Infoscale and others are products of Veritas, Inc.Veritas Infoscale is a highly available virtualized storage software.Veritas Foundation For Windows is a backup, storage management software.Veritas Foundation HA For Veritas Foundation HA For Windows is a backup, storage management...

The vulnerability of the Windows operating system, related to errors in the code, allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-35769

miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program...

Tencent Conference for Windows suffers from DLL hijacking vulnerability

Tencent Conference is an audio and video conferencing product under Tencent Cloud. A DLL hijacking vulnerability exists in the Windows version of Tencent Conference, which can be exploited by an attacker to gain control of the server...

CVE-2020-35112

The Mozilla Foundation Security Advisory describes this flaw as: If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension such as .bat...

Privilege escalation

Windows Digital Media Receiver Elevation of Privilege Vulnerability...

Palo Alto Networks Cortex XDR Agent 代码问题漏洞

Palo Alto Networks Cortex XDR Agent is a client software for checking the security of client devices from Palo Alto Networks Malaysia. A security vulnerability exists in Palo Alto Networks Cortex XDR that originates from a local privilege escalation vulnerability in the agent on Windows platforms...

CVE-2020-26233

GCM Core on Windows is affected by CVE-2020-26233 prior to 2.0.289. When recursively cloning a repo with submodules, Git Credential Manager Core may start a malicious git.exe in the top-level repository instead of the PATH git when reading configuration, potentially enabling code execution. The i...

Exploit for CVE-2020-1472

PoC exploit for CVE-2020-1472, a vulnerability in the Windows Netlogon service that allows for authentication bypass. The exploit uses the Impacket library to test the vulnerability and attempts to perform a Netlogon authentication bypass. The script will immediately terminate when successfully...

Vulnerability of Microsoft Graphics Components for Windows operating systems, allowing attackers to execute arbitrary code

The vulnerability of Microsoft Graphics Components in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Windows NDIS components in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of Windows NDIS components in Windows operating systems is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of Microsoft Windows operating systems, related to insecure management of privileges, allows attackers to escalate their privileges.

The vulnerability of Microsoft Windows operating systems is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows operating system arises from insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by transmitting specially crafted data...

The vulnerability of the Windows MSCTF Server component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows MSCTF Server component exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Windows operating system, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows operating system, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Windows operating system is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

CVE-2020-0575

Improper buffer restrictions in the IntelR Unite Client for Windows before version 4.2.13064 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-5992

NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to binary planting attacks by a local user, which may lead to code execution or escalation of privileges...