1022 matches found
@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/macos-arm64 (>=8.0.0, <=8.6.7)
@pnpm/macos-arm64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...
@pnpm/exe (>=8.0.0-alpha.0, <=8.6.7) potentially affected by CVE-2023-37478 via @pnpm/linux-arm64 (>=8.0.0, <=8.6.7)
@pnpm/linux-arm64 NPM version =8.0.0, =8.0.0-alpha.0, =8.6.7 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...
@pnpm/exe (>=7.0.0-alpha.0, <=7.33.3) potentially affected by CVE-2023-37478 via @pnpm/linux-arm64 (>=7.0.0, <=7.33.3)
@pnpm/linux-arm64 NPM version =7.0.0, =7.0.0-alpha.0, =7.33.3 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...
CVE-2023-33742
TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Cleartext Storage of Sensitive Information: RSA private key in Update.exe...
SUSE-SU-2023:2932-1 Security update for python-pip
This update for python-pip fixes the following issues: - Removed .exe files from the RPM package, to prevent issues with security scanners bsc1212015...
Blank Windows Display when Open Citrix Workspace APP
When opening Citrix Workspace App, it displays blank. User cannot input store's URL or username&password to login. However, the ICA session can be launched through browser. It shows msedgewebview2.exe crashed because tsafedoc64.dll does not meet the Microsoft signing level requirement in Event...
Buffer overflow
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
CVE-2023-36377
Buffer Overflow vulnerability in mtrojnar osslsigncode v.2.3 and before allows a local attacker to execute arbitrary code via a crafted .exe, .sys, and .dll files...
CopperStealer Malware Crew Resurfaces with New Rootkit and Phishing Kit Modules
The threat actors behind the CopperStealer malware resurfaced with two new campaigns in March and April 2023 that are designed to deliver two novel payloads dubbed CopperStealth and CopperPhish. Trend Micro is tracking the financially motivated group under the name Water Orthrus. The adversary is...
CVE-2023-29820
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819...
CVE-2023-29820
An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819...
Design/Logic Flaw
DISPUTED An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and...
CVE-2023-29820
CVE-2023-29820 affects Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and earlier. According to Red Hat entries, a local attacker can access sensitive information via the EXE installer, with the vulnerability stemming from (unstated) local-privilege context and exposure during ins...
CVE-2023-2417
A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as problematic. Affected by this issue is some unknown functionality of the file C:\Program Files x86\HostMonitor\RMA-Win\rmaactive.exe. The manipulation leads to unquoted search path. It is possible to launch t...
PortEx - Java Library To Analyse Portable Executable Files With A Special Focus On Malware Analysis And PE Malformation Robustness
PortEx is a Java library for static malware analysis of Portable Executable files. Its focus is on PE malformation robustness, and anomaly detection. PortEx is written in Java and Scala, and targeted at Java applications. Features Reading header information from: MSDOS Header, COFF File Header,...
Path traversal
Kiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases, etc. In versions of Kiwi TCMS prior to 12.2, there is no control over what kinds of files can be uploaded. Thus, a malicious actor may upload an .exe file or a file containing embedded...
Unable to launch ICA session due to wfica32.exe signature validation failure
After upgrading Citrix Workspace App to 2203 CU2 and 2210.5 and above in customer's client machine, ICA session became unable to launch. Specifically, ICA file can be downloaded but wfica32.exe never starts. The issue doesn't occur in the same client machine with Citrix Workspace App for Windows...
CVE-2022-43293
Wacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wacom\WacomTablet.exe...
SilentMoonwalk - PoC Implementation Of A Fully Dynamic Call Stack Spoofer
PoC Implementation of a fully dynamic call stack spoofer TL;DR SilentMoonwalk is a PoC implementation of a fully dynamic call stack spoofer, implementing a technique to remove the original caller from the call stack, using ROP to desynchronize unwinding from control flow. Authors This PoC is the...