CVE-2024-13188

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incorrect default permissions. The attack...

CVE-2024-13188 MicroWorld eScan Antivirus Installation var default permission

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incorrect default permissions. The attack...

CVE-2024-13188

CVE-2024-13188 affects MicroWorld eScan Antivirus 7.0.32 on Linux. The vulnerability stems from incorrect default permissions in the Installation Handler’s /opt/MicroWorld/var/ directory, enabling local access to manipulate permissions. Exploitation has been publicly disclosed. Remediation detail...

CVE-2024-13188 MicroWorld eScan Antivirus Installation var default permission

A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of the file /opt/MicroWorld/var/ of the component Installation Handler. The manipulation leads to incorrect default permissions. The attack...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2024-42919

The eScan Management Console version 14.0.1400.2281 is vulnerable to an Incorrect Access Control flaw. Specifically, the acteScanAVReport endpoint/function does not require authentication, allowing unauthorized users to access eScan AV reports. As a mitigation, it is recommended to update to the ...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

CVE-2024-42919

eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport...

MicroWorld eScan Management Console 安全漏洞

MicroWorld eScan Management Console is an eScan management console from MicroWorld, Inc. A security vulnerability exists in MicroWorld eScan Management Console version 14.0.1400.2281 that stems from susceptibility to incorrect access control via acteScanAVReport...

CVE-2024-28519

A kernel handle leak issue in ProcObsrvesx.sys 4.0.0.49 in MicroWorld Technologies Inc eScan Antivirus could allow privilege escalation for low-privileged users...

CVE-2024-28519

A kernel handle leak issue in ProcObsrvesx.sys 4.0.0.49 in MicroWorld Technologies Inc eScan Antivirus could allow privilege escalation for low-privileged users...

eScan Antivirus 安全漏洞

eScan Antivirus is a network anti-virus security software from eScan. A security vulnerability exists in eScan Antivirus version 4.0.0.49, which stems from a leaky kernel handle issue that could allow privilege escalation by a low-privileged user...

CVE-2024-28519

A kernel handle leak issue exists in the ProcObsrvesx.sys component of MicroWorld Technologies Inc eScan Antivirus version 4.0.0.49 . This vulnerability could allow privilege escalation for low-privileged users. While the documents recommend updating to a newer version to mitigate this risk, ther...

PT-2024-22450 · Microworld Technologies · Escan Antivirus

Name of the Vulnerable Software and Affected Versions: MicroWorld Technologies Inc eScan Antivirus version 4.0.0.49 Description: A kernel handle leak issue in ProcObsrvesx.sys could allow privilege escalation for low-privileged users. Recommendations: For version 4.0.0.49, consider updating to a...

eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners

A new malware campaign has been exploiting the updating mechanism of the eScan antivirus software to distribute backdoors and cryptocurrency miners like XMRig through a long-standing threat codenamed GuptiMiner targeting large corporate networks. Cybersecurity firm Avast said the activity is the...

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access this "could be exploited in a real world scenario." This is related to brcmf_cfg80211_escan_timeout_worker in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c.

...

CVE-2023-47233

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to...

UBUNTU-CVE-2023-47233

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to...

CVE-2023-47233

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmfcfg80211detach use-after-free in the device unplugging disconnect the USB by hotplug code. For physically proximate attackers with local access, this "could be exploited in a real world scenario." This is related to...