The vulnerability of the InstallService component for Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the InstallService component for Windows operating systems is related to privilege management errors. Exploiting this vulnerability could allow an attacker to enhance their privileges through a specially created application...

Vulnerability Spotlight: Multiple vulnerabilities in SoftMaker Office TextMaker

A Cisco Talos team member discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in SoftMaker's TextMaker software. A user could trigger these vulnerabilities by opening an attacker-created, malicious document. An adversary could use these...

Workspace App 1912.1000 - Workspace App Update removes user created shortcuts from Desktop

Consider the following scenario: Users have created shortcuts of published applications manually on their Desktop and have also pinned it to the task bar. When the Receiver is upgraded from 4.9.6001 to Workspace App for Windows 1912 or 2006, on the first launch of a published app, the shortcuts...

The vulnerability of the Windows COM Server component of the Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the Windows COM Server component of the operating system is related to errors in the processing of COM objects. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the OneDrive for Windows file sharing service lies in the improper definition of links before accessing files. This allows attackers to escalate their privileges.

The vulnerability of the OneDrive for Windows file sharing service is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

CVE-2020-8817

Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...

CVE-2020-8817

Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata...

The vulnerability of the Windows Speech Shell component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Speech Shell component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, related to errors in memory object handling, allows a perpetrator to trigger a service failure.

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created application...

The vulnerability of the Windows Diagnostics Execution Service in the Windows operating system allows a perpetrator to elevate their privileges and execute arbitrary code.

The vulnerability of the Windows Diagnostics Execution Service in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

The vulnerability of the WalletService service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

The vulnerability of the WalletService service on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

CVE-2020-12736

Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an administrator creates a local non-SSO user via a Code42-generated email, the administrator has the option to modify content for the email invitation. If the administrator enter...

UBUNTU-CVE-2020-12422

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox 78...

CVE-2020-3245

A vulnerability in the web application of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web application. An attacker could exploit this...

The vulnerability of the Microsoft Windows Update Client application on Windows operating systems allows a malicious individual to escalate their privileges.

The vulnerability of the Microsoft Windows Update Client application for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in their ability to allow unlimited loading of dangerous types of files, enabling attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the ability to download unlimited files of a malicious nature. Exploiting this vulnerability allows an attacker to execute arbitrary code by downloading a specially created package...

Frigate 3.36 SEH Buffer Overflow

Exploit Title: Frigate v3.36 SEH Buffer Overflow Version: 3.36 Exploit Author: Xenofon Vassilakopoulos Date: 03-05-2020 Vendor Homepage: http://www.Frigate3.com/ Software Link Download: http://www.Frigate3.com/download/Frigate3Stdv36.exe Tested on: Windows 7 Professional SP1 x86 Steps to reproduc...

The vulnerability of the Omnibox address bar in Google Chrome, related to improper access control to critical resources, allows attackers to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome relates to improper control of access to critical resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity using a specially created domain name...