Crescendo - A Swift Based, Real Time Event Viewer For macOS - It Utilizes Apple's Endpoint Security Framework

Crescendo is a swift based, real time event viewer for macOS. It utilizes Apple's Endpoint Security Framework. Getting Started Apple has introduced some new security mechanisms that we need to enable to get Crescendo running. 1.- Ensure that you have moved the app to your /Applications director o...

Hardcoded credentials

Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk C:\ to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo...

FusionForge Information Disclosure Vulnerability

FusionForge is a set of team collaboration development tools. The product includes features such as online communication, bug tracking and project management. A security vulnerability exists in FusionForge versions prior to 5.3.2. An attacker can exploit the vulnerability to access private data o...

ASUS ROG Zephyrus M GM501GS has an unspecified vulnerability

The ASUS ROG Zephyrus M GM501GS is a laptop from Asus Taiwan, China. A security vulnerability exists in the ASUS ROG Zephyrus M GM501GS with BIOS 313, which can be exploited by an attacker to reset the BIOS configuration and gain direct access to the hard disk by exhausting the main battery power...

The vulnerability of the unacev2.dll library of the WinRAR file compressor allows a hacker to place malicious files anywhere on the disk.

The vulnerability of the unacev2.dll file archiver in WinRAR is related to errors in processing the file name field the relative path is converted to an absolute path. Exploiting this vulnerability allows a remote attacker to place malicious files anywhere on the disk using a specially crafted AC...

Process Hacker - A Free, Powerful, Multi-Purpose Tool That Helps You Monitor System Resources, Debug Software And Detect Malware

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. System requirements Windows 7 or higher, 32-bit or 64-bit. Features A detailed overview of system activity with highlighting. Graphs and statistics allow you quickly to track down...

Shamoon Returns to Wipe Systems in Middle East, Europe

ARCHIVED STORY Shamoon Returns to Wipe Systems in Middle East, Europe By Alexandre Mundo · December 14, 2018 Destructive malware has been employed by adversaries for years. Usually such attacks are carefully targeted and can be motivated by ideology, politics, or even financial aims. Destructive...

Directory Traversal

libglusterfs.so is vulnerable to directory traversals attack. An authenticated user with access to the glusterfs server can read and write arbitrary files to the disk and possibly cause arbitrary code to be execute on the system...

K7 Anti-Virus Premium Multiple Vulnerabilities (Nov 2017)

K7 Anti-Virus Premium is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-15573

CVE-2018-15573 : Reprise License Manager (RLM) up to 12.2BL2 is exposed via a web interface on port 5054 that does not require authentication. An unauthenticated attacker can use /goform/edit_lf_process with file content in the lfdata parameter and a pathname in the lf parameter to read and write...

K7 Antivirus Premium Information Disclosure Vulnerability

K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions of K7 Antivirus Premium prior to 15.1.0.53, which stems from a failure to adequately authenticate user input sent to the K7Sentry device. A local attacker could exploit the...

CVE-2017-17429

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL...

CVE-2017-17429

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL...

Symantec Encryption Desktop And Endpoint Encryption Local Privilege Escalation

Vulnerabilities in Symantec Encryption Desktop and Endpoint Encryption allow an attacker to attain arbitrary hard disk read and write access at sector level, and subsequently infect the target and gain low level persistence MBR/VBR. They also allow the attacker to execute code in the context of t...

Mozilla Firefox Same-Origin Policy Bypass Vulnerability (CNVD-2016-11471)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. Mozilla Firefox suffers from a homology policy bypass vulnerability, which can be exploited by an attacker to bypass the local shortcut file and load arbitrary local content from disk...

Paessler PRTG Network Monitor Local File Read Vulnerability

Paessler PRTG Network Monitor is a suite of network monitoring software. A security vulnerability exists in Paessler PRTG Network Monitor that could be exploited by a remote attacker to read files stored on a local disk with account access privileges...

CVE-2016-0190

Volume Manager Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 does not properly check whether RemoteFX RDP USB disk accesses originate from the user who mounted a disk, which allows local users to read arbitrary files on these disks via RemoteFX requests, aka...

USN-1943-1: Linux kernel (Raring HWE) vulnerabilities

Vasily Kulikov discovered a flaw in the Linux Kernel's perf tool that allows for privilege escalation. A local user could exploit this flaw to run commands as root when using the perf tool. CVE-2013-1060 A flaw was discovered in the Xen subsystem of the Linux kernel when it provides read-only...

Google Chrome 19 metro_driver.dll mishandling

Security Advisory - Google Chrome 19 metrodriver.dll mishandling ======================================================================== Summary : Google Chrome 19 is prone to unqualified DLL loading Date : 28 June 2012 Affected versions : Google Chrome v19.0.1084.21 up-to v20.0.1132.23 ID :...

CVE-2011-4127

The Linux kernel before 3.2.2 does not properly restrict SGIO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to 1 a partition block device or 2 an LVM volume...