EUVD-2012-0072

Malware in sbrugna...

EUVD-2013-0441

Malware in sbrugna...

Do Not Install the LDAP Client

Lightweight Directory Access Protocol LDAP is a protocol that provides access control and is used to maintain distributed directory information. Running the LDAP service requires additional system resources and expands the attack surface. Therefore, do not install the LDAP client in the service...

Do Not Install the Telnet Client

Telnet is an application-layer protocol and is usually used for remote login, operation control, and system modification of servers. Telnet data is not encrypted, and user names, passwords, and transmitted data can be easily stolen by attackers. Therefore, do not install or use Telnet clients. Us...

ISLOnline ISL Light Client Installed (Windows)

Binary data islonlineisllightclientwininstalled.nbin...

Pritunl Client Installed (Linux / Unix)

Binary data pritunlclientnixinstalled.nbin...

CVE-2023-32232

An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out o...

SUSE CVE-2013-0430

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11 and 6 through Update 38, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process of the client...

CVE-2022-23171

AtlasVPN - Privilege Escalation Lack of proper security controls on named pipe messages can allow an attacker with low privileges to send a malicious payload and gain SYSTEM permissions on a windows computer where the AtlasVPN client is installed...

CVE-2021-34412

During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...

CVE-2016-10730

An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. Amstar is an Amanda Application API script. It should not be run by users directly. It uses star to backup and restore data. It runs binaries with root permissions when parsing t...

CVE-2016-10730

An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. Amstar is an Amanda Application API script. It should not be run by users directly. It uses star to backup and restore data. It runs binaries with root permissions when parsing t...

Recommendation on installing SCCM Client on Citrix Virtual Desktop Master Image

Recommendations on installing of SCCM client on VDI master image...

CVE-2018-2811

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Install. Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to compromise Java SE...

Red Hat keycloak-httpd-client-install file overwrite vulnerability

Red Hat keycloak is a suite of software from Red Hat that provides authentication and management capabilities for modern applications and services. keycloak-httpd-client-install is an executable installer. A security vulnerability exists in Red Hat keycloak-httpd-client-install that stems from th...

Default credentials

Before Thornberry NDoc version 8.0, laptop clients and the server have default database Cache users set up with a single password. This password is left behind in a cleartext log file during client installation on laptops. This password can be used to gain full admin/system access to client devic...

Amanda 3.3.1 - Privilege Escalation

Exploit for linux platform in category local exploits / AMANDA, the Advanced Maryland Automatic Network Disk Archiver, is a backup solution that allows the IT administrator to set up a single master backup server to back up multiple hosts over network to tape drives/changers or disks or optical...

Tenable Log Correlation Engine (LCE) Client Installed (macOS credentialed check)

Binary data lceclientinstalledmacosx.nbin...

CVE-2012-0032

Red Hat JBoss Operations Network JON before 3.0.1 uses 0777 permissions for the root directory when installing a remote client, which allows local users to read or modify subdirectories and files within the root directory, as demonstrated by obtaining JON credentials...

JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Install)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11 and 6 through Update 38, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process of the client...