Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:56 a.m.5 views

CVE-2020-12828

An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Binding to the socket and providing a path where a malicious executable file resides leads to executing the malicious executable file with SYSTE...

10CVSS6.9AI score0.14757EPSS
Exploits1References1
CNVD
CNVD
added 2020/05/22 12:0 a.m.1 views

Unspecified Vulnerability in Pango AnchorFree VPN SDK

Pango AnchorFree VPN SDK is a VPN Virtual Private Network software development kit from Pango USA. A security vulnerability exists in Pango AnchorFree VPN SDK versions prior to 1.3.3.218. An attacker can exploit the vulnerability to execute malicious files with SYSTEM privileges...

10CVSS7.1AI score0.14757EPSS
Exploits1References1
NVD
NVD
added 2020/05/21 5:15 p.m.8 views

CVE-2020-12828

An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Binding to the socket and providing a path where a malicious executable file resides leads to executing the malicious executable file with SYSTE...

10CVSS9.4AI score0.14757EPSS
Exploits1References1
OSV
OSV
added 2020/05/21 5:15 p.m.0 views

CVE-2020-12828

An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Binding to the socket and providing a path where a malicious executable file resides leads to executing the malicious executable file with SYSTE...

9.8CVSS7.3AI score
Exploits0References1
Prion
Prion
added 2020/05/21 5:15 p.m.8 views

Design/Logic Flaw

An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Binding to the socket and providing a path where a malicious executable file resides leads to executing the malicious executable file with SYSTE...

10CVSS9.2AI score0.14757EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2020/05/21 4:25 p.m.44 views

CVE-2020-12828

CVE-2020-12828 affects the AnchorFree VPN SDK prior to 1.3.3.218. The vulnerable component is the VPN SDK service, which binds a socket on localhost and uses a provided path to a executable file, leading to execution of that malicious file with SYSTEM privileges. The connected Red Hat and CNVD en...

10CVSS9.3AI score0.14757EPSS
Exploits1References1Affected Software1
The Hacker News
The Hacker News
added 2018/02/07 1:13 p.m.21 views

Researcher Claims Hotspot Shield VPN Service Exposes You on the Internet

Virtual Private Network VPN is one of the best solutions you can have to protect your privacy and data on the Internet, but you should be more vigilant while choosing a VPN service which truly respects your privacy. If you are using the popular VPN service Hotspot Shield for online anonymity and...

7.5CVSS7.6AI score0.20389EPSS
Exploits3
ThreatPost
ThreatPost
added 2018/02/07 1:0 p.m.18 views

Hotspot Shield Vulnerability Could Reveal ‘Juicy’ Info About Users, Researcher Claims

UPDATE A vulnerability in the popular HotSpot Shield VPN client, which is promoted as being able to hide users’ identities, could expose their IP addresses and “other juicy info,” according to a security researcher. Paulos Yibelo, a researcher who has collected on a number of bug bounties in the...

5CVSS7.5AI score0.20389EPSS
Exploits3References8
Rows per page
Query Builder