toy-eraser.com Cross Site Scripting vulnerability OBB-3241166

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

New Flaws in Top Antivirus Software Could Make Computers More Vulnerable

Cybersecurity researchers today disclosed details of security vulnerabilities found in popular antivirus solutions that could enable attackers to elevate their privileges, thereby helping malware sustain its foothold on the compromised systems. According to a report published by CyberArk research...

Norton Power Eraser Elevation of Privilege Vulnerability

Norton Power Eraser is a free virus removal tool that targets and destroys threats to your computer. An elevation of privilege vulnerability exists in versions prior to Norton Power Eraser 5.3.0.67. An attacker could exploit this vulnerability to gain unauthorized access to resources...

CVE-2019-19548

Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

CVE-2019-19548

Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

Privilege escalation

Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

CVE-2019-19548

The CVE-2019-19548 entry concerns Norton Power Eraser. Connected sources specify a Local Privilege Escalation affecting Norton Power Eraser versions prior to 5.3.0.67. Notable vulnerable versions include NPE 2.0.0.52, 5.1, 5.3.0.20, and 5.3.0.24. The root cause and detailed exploit path are not d...

CVE-2019-19548

Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user...

Norton Power Eraser CVE-2019-19548 Local Privilege Escalation Vulnerability

Description Norton Power Eraser is prone to a local privilege escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. Versions prior to Norton Power Eraser Prior to 5.3.0.67 are vulnerable. Technologies Affected Symantec Norton Power Eraser NPE 2.0.0.52...

Eraser - Secure Erase Files from Hard Drives on Windows

Eraser is an advanced security tool for Windows which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns. Eraser is currently supported under Windows XP with Service Pack 3, Windows Server 2003 with Service Pack 2,...

CVE-2018-5238

Norton Power Eraser prior to 5.3.0.24 and SymDiag prior to 2.1.242 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the...

CVE-2018-5238

Norton Power Eraser prior to 5.3.0.24 and SymDiag prior to 2.1.242 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the...

Sql injection

Norton Power Eraser prior to 5.3.0.24 and SymDiag prior to 2.1.242 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the...

CVE-2018-5238

Norton Power Eraser prior to 5.3.0.24 and SymDiag prior to 2.1.242 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the...

CVE-2018-5238

CVE-2018-5238 affects Norton Power Eraser (before 5.3.0.24) and SymDiag (before 2.1.242). It is a DLL preloading vulnerability where an application loads a DLL and an attacker-provided DLL in the search path can be chosen, allowing code execution under the application’s context. The vulnerability...

Memory corruption

The AntiVirus Decomposer engine in Symantec Advanced Threat Protection ATP; Symantec Data Center Security:Server SDCS:S 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection SEP before 12.1 RU6 MP5; Symantec Endpoint Protection SEP for Mac; Symantec Endpoint Protection SEP for...

PhotoLayers〜Superimpose,Eraser - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application PhotoLayers〜Superimpose,Eraser published at the 'play' market has multiple vulnerabilities...

Background Eraser - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Background Eraser published at the 'play' market has multiple vulnerabilities...

CVE-2002-2067

East-Tec Eraser 2002 on Windows NTFS fails to clear alternate data streams attached to files, allowing recovery of supposedly deleted sensitive information. Descriptions across NVD, Red Hat, and CVE records confirm the issue and its impact on confidentiality (partial in CVSS v2, high in CVSS v3.1...

CVE-2002-2067

East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed to be deleted...