Lucene search
+L

698 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 6:20 p.m.•9 views

Malicious code in @eset/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5f578374b263de3fc3ec677051ec6f9fab4749be6a9c2a0bf1a1533b019fad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 6:20 p.m.•12 views

MAL-2022-252 Malicious code in @eset/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5f578374b263de3fc3ec677051ec6f9fab4749be6a9c2a0bf1a1533b019fad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/05/17 12:00 a.m.•17 views

The vulnerability of the ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Server Security for Microsoft Windows Server, ESET File Security for Microsoft Windows Server, ESET Mail Security for Microsoft Exchange Server, ESET Mail Security for IBM Domino, and ESET Security for Microsoft SharePoint Server software installations allows a hacker to escalate their privileges and delete arbitrary files.

The vulnerability of ESET NOD32 Antivirus, ESET Internet Security, ESET Smart Security Premium, ESET Endpoint Antivirus, ESET Endpoint Security, ESET Server Security for Microsoft Windows Server, ESET File Security for Microsoft Windows Server, ESET Mail Security for Microsoft Exchange Server, ES...

7.1CVSS7.2AI score0.0019EPSS
SaveExploits0References3Affected Software10
OSV
OSV
•added 2022/05/11 3:15 p.m.•13 views

CVE-2021-37851

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o...

7.8CVSS7.2AI score0.00208EPSS
SaveExploits0References1
NVD
NVD
•added 2022/05/11 3:15 p.m.•36 views

CVE-2021-37851

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o...

7.8CVSS0.00208EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/11 3:15 p.m.•27 views

Design/Logic Flaw

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o...

7.2CVSS7.6AI score0.00208EPSS
SaveExploits0References1Affected Software9
CVE
CVE
•added 2022/05/11 2:08 p.m.•106 views

CVE-2021-37851

CVE-2021-37851 is a local privilege escalation in ESET Windows products where an unpatched installer repair flow can be abused to execute code with higher privileges. Affected are ESET NOD32 Antivirus, Internet Security, Smart Security Premium (11.2 prior to 15.1.12.0) and ESET Endpoint Antivirus...

7.8CVSS7.5AI score0.00208EPSS
SaveExploits0References1Affected Software9
Cvelist
Cvelist
•added 2022/05/11 2:08 p.m.•43 views

CVE-2021-37851 Local Privilege Escalation in ESET product for Windows

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o...

7.3CVSS7.9AI score0.00208EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/11 12:00 a.m.•11 views

CVE-2021-37851: Improper Handling of Insufficient Permissions or Privileges

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o...

7.8CVSS7.3AI score0.00208EPSS
SaveExploits0References3
NVD
NVD
•added 2022/05/10 8:15 p.m.•30 views

CVE-2022-27167

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET...

7.1CVSS0.0019EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/10 8:15 p.m.•26 views

Privilege escalation

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET...

3.6CVSS7AI score0.0019EPSS
SaveExploits0References1Affected Software9
CVE
CVE
•added 2022/05/10 7:43 p.m.•121 views

CVE-2022-27167

CVE-2022-27167 describes a local privilege-escalation in multiple ESET Windows products, allowing an attacker to abuse the Repair/Uninstall paths to delete files. Affected products include ESET NOD32 Antivirus, Internet Security, Smart Security Premium, Endpoint Antivirus/Security, Server/File/Ma...

7.1CVSS7AI score0.0019EPSS
SaveExploits0References1Affected Software9
Cvelist
Cvelist
•added 2022/05/10 7:43 p.m.•29 views

CVE-2022-27167 Arbitrary File Deletion in ESET products for Windows

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET...

7.1CVSS7.2AI score0.0019EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/05/10 12:00 a.m.•17 views

ESET NOD32 Antivirus 安全漏洞

ESET NOD32 Antivirus is a suite of antivirus programs from ESET Slovakia. A security vulnerability exists in ESET NOD32 Antivirus, which can be exploited by an attacker to escalate privileges via repair and uninstall options...

7.1CVSS7.1AI score0.0019EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/10 12:00 a.m.•5 views

CVE-2022-27167: Improper Handling of Insufficient Permissions or Privileges

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET...

7.1CVSS7.1AI score0.0019EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/05/10 12:00 a.m.•27 views

多款ESET产品安全漏洞

ESET Smart Security Premium and others are products of ESET Slovakia.Smart Security Premium is a suite of antivirus programs.Internet Security is a suite of antivirus programs for Internet security.Eset Endpoint Antivirus and others are products of Eset Slovakia.Eset Endpoint Antivirus is an...

7.8CVSS7.4AI score0.00208EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/05/09 1:00 p.m.•11 views

CVE-2021-37851

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o...

7.8CVSS6AI score0.00208EPSS
SaveExploits0References2Affected Software9
Positive Technologies
Positive Technologies
•added 2022/05/09 12:00 a.m.•6 views

PT-2022-2607

Name of the Vulnerable Software and Affected Versions ESET NOD32 Antivirus versions 11.2 through 15.1.11.0 ESET Internet Security versions 11.2 through 15.1.11.0 ESET Smart Security Premium versions 11.2 through 15.1.11.0 ESET Endpoint Antivirus versions 6.0 through 9.0.2045.0 ESET Endpoint...

7.8CVSS0.00208EPSS
SaveExploits0References6
The Hacker News
The Hacker News
•added 2022/05/06 7:17 a.m.•41 views

Experts Uncover New Espionage Attacks by Chinese 'Mustang Panda' Hackers

The China-based threat actor known as Mustang Panda has been observed refining and retooling its tactics and malware to strike entities located in Asia, the European Union, Russia, and the U.S. "Mustang Panda is a highly motivated APT group relying primarily on the use of topical lures and social...

1.4AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2022/03/29 10:07 a.m.•20 views

Experts Detail Virtual Machine Used by Wslink Malware Loader for Obfuscation

Cybersecurity researchers have shed more light on a malicious loader that runs as a server and executes received modules in memory, laying bare the structure of an "advanced multi-layered virtual machine" used by the malware to fly under the radar. Wslink, as the malicious loader is called, was...

0.6AI score
SaveExploits0
Rows per page
Query Builder