989 matches found
Razer: User Access Control Bypass Via Razer elevated service ( RzKLService.exe ) which loads exe in misconfigured way.
The tester discovered a Cortex related service suffered from a code path vulnerability that could lead to escalation of privilege. Razer thanks the tester for his report and helping keep our users secure...
Microsoft UPnP - Local Privilege Elevation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/registry' require 'msf/core/exploit/exe'...
Microsoft UPnP Local Privilege Elevation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/registry' require 'msf/core/exploit/exe'...
Privilege escalation
NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \.\mailslot\nlsX86ccMailslot mailslot...
CVE-2019-19315
NLSSRV32.EXE in Nalpeiron Licensing Service 7.3.4.0, as used with Nitro PDF and other products, allows Elevation of Privilege via the \.\mailslot\nlsX86ccMailslot mailslot...
CVE-2019-19315
CVE-2019-19315 affects Nalpeiron Licensing Service (NLSSRV32.EXE) version 7.3.4.0, used with Nitro PDF and other products. The vulnerability enables Elevation of Privilege via the .-mailslotlsX86ccMailslot mailslot, allowing local attacker to gain higher privileges. Documents consistently identif...
CVE-2019-19382
Max Secure Anti Virus Plus 19.0.4.020 has Insecure Permissions on the installation directory. Local attackers can replace a .exe or .dll file to achieve privilege escalation...
The vulnerability of the executable file splwow64.exe in the Windows operating system allows a hacker to gain elevated privileges.
The vulnerability of the executable file splwow64.exe in the Windows operating system is related to errors in call handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Microsoft Windows splwow64 Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the user-mode...
CVE-2019-1380
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'...
CVE-2019-1380
CVE-2019-1380 is a local elevation-of-privilege issue in Windows where splwow64.exe mishandles certain calls (aka Microsoft splwow64 Elevation of Privilege Vulnerability). Affected software is Windows system component splwow64.exe; root cause centers on how certain calls are processed. Documented...
Microsoft splwow64 Elevation of Privilege Vulnerability
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity. This vulnerability by itself does not allow arbitrary code...
CVE-2019-1789 ClamAV Denial of Service Vulnerability
ClamAV versions prior to 0.101.2 are susceptible to a denial of service DoS vulnerability. An out-of-bounds heap read condition may occur when scanning PE files. An example is Windows EXE and DLL files that have been packed using Aspack as a result of inadequate bound-checking...
PESTO - PE (files) Statistical Tool
PESTO is a Python script that extracts and saves in a database some PE file security characteristics or flags searching for every PE binary in a whole directory, and saving results in a database. It checks for architecture flag in the header, and for the following security flags: ASLR, NOSEH, DEP...
Astaroth Spy Trojan Uses Facebook, YouTube Profiles to Cover Tracks
Facebook and YouTube profiles are at the heart of an ongoing phishing campaign spreading the Astaroth trojan, bent on the eventual exfiltration of sensitive information. The attack is sophisticated in that it uses normally trusted sources as cover for malicious activities – thus evading usually...
Exe hijacking vulnerability in Aiki Video pc client
Aiki Video pc client is a client software for video playback under Aiki. A QiYi Video pc client suffers from an exe hijacking vulnerability that can be exploited by an attacker to execute arbitrary code on the victim's machine...
Wizards endpoint security suffers from exe hijacking vulnerability
Wizards Endpoint Security is an antivirus program based on artificial intelligence technology. Wise Terminal Security has an exe hijacking vulnerability that can be exploited by an attacker to execute arbitrary code on the victim's machine...
The vulnerability of the splwow64.exe process in the Windows operating system, which allows attackers to escalate their privileges
The vulnerability of the splwow64.exe process in Windows operating systems is related to call processing errors. Exploiting this vulnerability can allow attackers to gain increased privileges...
Comodo Security Comodo Security Solutions Antivirus Buffer Overflow Vulnerability
Comodo Security Solutions Antivirus is a suite of antivirus software from the American company Comodo Security Solutions. The software is mainly used to protect against computer viruses, malware and other Internet threats. A buffer overflow vulnerability exists in Comodo Security Solutions...