989 matches found
CVE-2022-36414
CVE-2022-36414 describes an elevation-of-privilege breakout in the Windows EXE installer of Scooter Beyond Compare (versions 4.2.0–4.4.2) that can allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation. Affected versions require u...
Researchers Uncover New Attempts by Qakbot Malware to Evade Detection
The operators behind the Qakbot malware are transforming their delivery vectors in an attempt to sidestep detection. "Most recently, threat actors have transformed their techniques to evade detection by using ZIP file extensions, enticing file names with common formats, and Excel XLM 4.0 to trick...
CVE-2022-33037
A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...
Code injection
A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...
CVE-2022-33037
A binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted .exe file...
CVE-2022-33036
A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a crafted .exe file...
Microsoft Office Visio VSD Silent Builder Exploit
0day exploit is a program that injects any executable formatted file .exe into the desired visio .vsd file. The exe is automatically executed when the file.vsd is opened. Bypasses all antivirus programs...
CVE-2022-29333
A vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a crafted .exe file...
Design/Logic Flaw
A vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a crafted .exe file...
CVE-2022-29333
A vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a crafted .exe file...
CVE-2022-29333
CVE-2022-29333 affects CyberLink PowerDirector v14, enabling privilege escalation via a crafted executable. The public descriptions confirm a local escalation Vector with user interaction required and partial to high impact on confidentiality, integrity, and availability per CVSS metrics, but no ...
Microsoft Windows Privilege Escalation Vulnerability
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity...
Researchers Warn of 'Raspberry Robin' Malware Spreading via External Drives
Cybersecurity researchers have discovered a new Windows malware with worm-like capabilities and is propagated by means of removable USB devices. Attributing the malware to a cluster named "Raspberry Robin," Red Canary researchers noted that the worm "leverages Windows Installer to reach out to...
CVE-2022-27526
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...
PT-2022-2821 · Microsoft · Diskusage.Exe +1
Name of the Vulnerable Software and Affected Versions: DiskUsage.exe affected versions not specified Description: The issue exists due to insufficient input validation in the DiskUsage.exe file of the Windows operating system. This allows a remote attacker to execute arbitrary code...
Backdoor.Win32.FTP.Lana.01.d Man-In-The-Middle
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/ea9ab5983a6fa71e31907e74d4ddbab6B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.FTP.Lana.01.d Vulnerability: Port Bounce Scan Description: The malware listens on TC...
CVE-2022-27963
Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...
CVE-2022-27965
Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file...