CVE-2024-22752

Insecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain escalated privileges via use of crafted executable launched from the application installation directory...

CVE-2024-22752

Insecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain escalated privileges via use of crafted executable launched from the application installation directory...

CVE-2024-22752: Improper Privilege Management

Insecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain escalated privileges via use of crafted executable launched from the application installation directory...

CVE-2024-22752

EaseUS MobiMover 6.0.5 Build 21620 is vulnerable to an elevation of privileges due to insecure file and folder permissions. Specifically, the bin folder (e.g., C:\Program Files (x86)\EaseUS\EaseUS MobiMover\bin) grants the Authenticated Users group the Modify Privilege (M) , allowing them to repl...

CVE-2023-32221

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

CVE-2023-32221

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

Privilege escalation

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

CVE-2023-32221: Incorrect Default Permissions

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

PT-2023-23668 · Easeus · Easeus Todo Backup

Name of the Vulnerable Software and Affected Versions: EaseUS Todo Backup version 20220111.390 Description: The issue is related to an omission during the installation process of EaseUS Todo Backup, which may allow a local attacker to perform privilege escalation. Recommendations: For EaseUS Todo...

EaseUS Todo Backup security vulnerabilities

EaseUS Todo Backup is a free data backup software from EaseUS. A security vulnerability exists in EaseUS Todo Backup version 20220111.390. A local attacker can exploit the vulnerability to elevate privileges...

CVE-2023-32221 EaseUS Todo Backup may allow local privilege escalation

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

CVE-2023-32221 EaseUS Todo Backup may allow local privilege escalation

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

CVE-2023-32221

CVE-2023-32221 affects EaseUS Todo Backup version 20220111.390. The vulnerability arises from an installation-time omission that may allow a local attacker to escalate privileges. Reports in connected sources corroborate a local-privilege-escalation impact. Remediation suggested by PT-2023-23668 ...

CVE-2023-32221

EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privilege escalation...

EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path

Exploit Title: EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path Discovery by: bios Discovery Date: 2022-18-04 Vendor Homepage: https://www.easeus.com/ Tested Version: 15.1.0.0 Vulnerability Type: Unquoted Service Path Tested on OS: Microsoft Windows 10 Pro x64 Step to discover Unquote...

EaseUS Data Recovery - (ensserver.exe) Unquoted Service Path Vulnerability

Exploit Title: EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path Discovery by: bios Vendor Homepage: https://www.easeus.com/ Tested Version: 15.1.0.0 Vulnerability Type: Unquoted Service Path Tested on OS: Microsoft Windows 10 Pro x64 Step to discover Unquoted Service Path: C:\wmic...

EaseUS Data Recovery 15.1.0.0 Unquoted Service Path

Exploit Title: EaseUS Data Recovery - 'ensserver.exe' Unquoted Service Path Discovery by: bios Discovery Date: 2022-18-04 Vendor Homepage: https://www.easeus.com/ Tested Version: 15.1.0.0 Vulnerability Type: Unquoted Service Path Tested on OS: Microsoft Windows 10 Pro x64 Step to discover Unquote...

Digging into HermeticWiper

Digging into HermeticWiper By Max Kersten · March 2, 2022 A special thanks toMarc Elias for his help during my analysis. Additionally, I’d like to commend all researchers who have publicly shared their initial findings to help incident response teams; I hope this deep dive contributes to a furthe...

New Wiper Malware Targeting Ukraine Amid Russia's Military Operation

Cybersecurity firms ESET and Broadcom's Symantec said they discovered a new data wiper malware used in fresh attacks against hundreds of machines in Ukraine, as Russian forces formally launched a full-scale military operation against the country. The Slovak company dubbed the wiper "HermeticWiper...

File Containment Vulnerability in EaseUS Web Authentication System

EaseUS Web Authentication System is a user management system structured in PHP+Mysql. A file inclusion vulnerability exists in EaseUS Web Authentication System. An attacker can exploit this vulnerability to gain server privileges...