Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-10992)

Microsoft Windows is the popular computer operating system. Microsoft Windows "Microsoft COM for Windows" does not properly handle serialized objects, allowing remote attackers to exploit vulnerabilities in special files or scripts that can be parsed by the user to execute arbitrary code...

TP-Link EAP Controller and Omada Controller Elevation of Privilege Vulnerability

TP-Link EAP Controller and Omada Controller are both software from China P&L TP-LINK for remote control of wireless AP access point devices. A security vulnerability exists in TP-Link EAP Controller and Omada Controller versions 2.5.4Windows and 2.6.0Windows, which originates from the program's...

The vulnerability of the Credential Security Support Provider protocol (CredSSP) in the Windows operating system, which allows a perpetrator to execute arbitrary commands on behalf of a legitimate user

The vulnerability of the Credential Security Support Provider protocol CredSSP in the Windows operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary commands on behalf of a legitimate user...

CVE-2018-10381

TunnelBear 3.2.0.6 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "TunnelBearMaintenance" service. This service establishes a NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "OpenVPNConnect"...

7-Zip Access Restriction Bypass Vulnerability

7-Zip for Windows is a set of free, open source compression/decompression software for Windows-based platforms. A security vulnerability exists in 7-Zip 18.01 and earlier versions for Windows-based platforms, which originates when the program implements the 'Larger Memory Pages' option by calling...

ProtonVPN Elevation of Privilege Vulnerability

ProtonVPN for Windows is a free Windows-based VPN software for anonymous access to the Internet. A power lifting vulnerability exists in version 1.3.3 of ProtonVPN for Windows-based platforms, which stems from a NetNamedPipe endpoint created by the 'ProtonVPN Service' service that allows arbitrar...

Privilege escalation

ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "ProtonVPN Service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "Connect" method accepts a...

CVE-2018-0976

A denial of service vulnerability exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests, aka "Windows Remote Desktop Protocol RDP Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows...

Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-08492)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2008 SP2 is a set of server operating systems. A remote code execution vulnerability exists in Microsoft...

Microsoft Fixes 66 Bugs in April Patch Tuesday Release

Microsoft’s April Patch Tuesday release includes fixes for 66 bugs, 24 of which are rated critical. Notable is Microsoft’s disclosure of a publicly known SharePoint elevation of privilege bug CVE-2018-1034, rated important, which has no fix but has not been publicly exploited. Microsoft SharePoin...

CVE-2018-5224

Bamboo did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An attacker who has permission to create a repository in Bamboo, edit an existing plan in Bamboo that has a non-linked Mercurial repository,...

Advanced SystemCare Ultimate Denial of Service Vulnerability (CNVD-2018-07109)

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A security vulnerability exists in the Monitorwin10x64.sys driver file in Advanced SystemCare Ultimate version 11.0.1.58, which...

Buffer Overflow Vulnerability in Advanced SystemCare Ultimate v11.0.1

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A buffer overflow vulnerability exists in Advanced SystemCare Ultimate v11.0.1. An attacker can write a 0 to an arbitrary address...

Remote code execution

The Credential Security Support Provider protocol CredSSP in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code...

EUVD-2018-1719

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due to how Internet Explorer handles objects in memory, aka...

CVE-2018-6016

CVE-2018-6016 describes an Unquoted Windows search path vulnerability in the srvInventoryWebServer service of 10-Strike Network Monitor 5.4. This local-privilege-escalation flaw can be exploited by placing a malicious artefact to gain elevated privileges. The NVD CVSSv3 vector is CVSS:3.0/AV:L/AC...

Panda Global Security 17.0.1 Unquoted Service Path

===== Tempest Security Intelligence - ADV-18/2018 === Panda Global Security 17.0.1 - Unquoted service path ------------------------------------------------------- Author: - Filipe Xavier Oliveira: sc qc pandaurlfiltering SERVICENAME: pandaurlfiltering TYPE : 10 WIN32OWNPROCESS STARTTYPE : 2...

Gemalto SafeNet Authentication Service End User Software Tools for Windows Elevation of Privilege Vulnerability

Gemalto SafeNet Authentication Service End User Software Tools for Windows is a Windows-based SafeNet Authentication Service tool from Gemalto USA. A security vulnerability exists in SafeNet Authentication Service End User Software Tools for Windows that stems from the program's use of weak acces...

FTPShell client denial of service vulnerability

FTPShell client is a set of windows-based file transfer program. A security vulnerability exists in FTPShell Client version 6.7. A remote attacker can cause a denial of service crash and execute arbitrary code by sending 400 'F' characters and FTP 220 response code to exploit the vulnerability...

Delta Electronics WPLSoft Out-of-Bounds Write Vulnerability

WPLSoft Delta PLC Programming Software is a PLC program programming software launched by Delta Electronics for use in the WINDOWS operating system environment. An out-of-bounds write vulnerability exists in Delta Electronics WPLSoft, where the application writes data from a file outside the range...