Safenet_SAC_CVE-2021-42056

SafeNet 认证客户端权限提升漏洞 CVE-2021-42056 根据Thales的网站1，SafeNet认证客户端是一个中间件客户端，用于管理Thales庞大的基于证书的身份验证器SafeNet产品组合，包括eToken、SafeNet IDPrime智能卡、USB及基于软件的设备。 多个文件设置了不恰当的权限，允许以root用户覆盖文件，以及权限提升（需要多个步骤）。 细节 CWE-378：不安全权限下的临时文件创建 CWE-377：不安全的临时文件 在安装过程中，Safenet 对以下目录设置了 chmod 777，对文件设置了 666（列出在最新SAC版本中仍然存在漏洞的文件...

The vulnerability of the standard authentication client of the Data Hub Adapter for the SAP Commerce Cloud platform allows a hacker to execute arbitrary code and cause complete system compromise.

The vulnerability of the standard authentication client for Data Hub Adapters in the SAP Commerce Cloud platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, leading to a complete compromise of the system...

CVE-2026-58231

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

Changing IDExpert Windows Logon Agent 安全漏洞

Changing IDExpert Windows Logon Agent is an identity authentication client software developed by Changing, a company based in Taiwan, China. This software is designed to enhance security during Windows login processes. Changing IDExpert Windows Logon Agent contains a security vulnerability that...

Cyberoam Authentication Client 安全漏洞

The Cyberoam Authentication Client is a network authentication client developed by the American company Cyberoam. Version 2.1.2.7 of the Cyberoam Authentication Client contains a security vulnerability. This vulnerability stems from a buffer overflow in the Cyberoam Server Address field, which...

EUVD-2010-3319

Malware in sbrugna...

EUVD-2023-59208

Malicious code in bioql PyPI...

EUVD-2021-29043

Malicious code in bioql PyPI...

CVE-2023-5993

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-5993

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-7016

A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access...

Authentication flaw

A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access...

CVE-2023-7016 Privilege Escalation in SafeNet Authentication Client

A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access...

CVE-2023-7016 Privilege Escalation in SafeNet Authentication Client

A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access...

CVE-2023-7016

CVE-2023-7016 affects Thales SafeNet Authentication Client on Windows prior to 10.8 R10. The root cause is a local-privilege escalation allowing an attacker with local access to execute code with SYSTEM privileges. Impact is high (confidentiality, integrity, and availability). Remediation: update...

CVE-2023-5993 Privilege Escalation in SafeNet Authentication Client Installer

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-5993 Privilege Escalation in SafeNet Authentication Client Installer

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-5993

CVE-2023-5993 affects Thales SafeNet Authentication Client on Windows due to a Windows Installer flaw prior to version 10.8 R10 that enables local privilege escalation. The root cause is a vulnerability in the installer process, allowing an attacker with local access to escalate privileges (CVE d...

PT-2024-14855 · Microsoft +1 · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Thales SafeNet Authentication Client versions prior to 10.8 R10 Description: A flaw in the Windows Installer in Thales SafeNet Authentication Client allows an attacker to escalate their privilege level via local access. Recommendations: For...

Thales SafeNet Authentication Client Security Vulnerability

Thales Group Thales Safenet Authentication Client is an authentication client from Thales Group, France. A security vulnerability exists in Thales SafeNet Authentication Client versions prior to 10.8 R10 that originates from a vulnerability that allows an attacker to execute code at the system...