CVE-2020-25593

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions...

CVE-2020-25593

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions...

Privilege escalation

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions...

CVE-2020-15496

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions...

Privilege escalation

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions...

CVE-2020-25593

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions...

CVE-2020-15496

Affected product: Acronis True Image for Mac prior to 2021 Update 4. Issue: local privilege escalation caused by insecure folder permissions in the product. Root cause: insecure permissions enabling a local attacker with low privileges to elevate to higher privileges. Impact: per CVSS metrics, hi...

CVE-2020-15496

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions...

CVE-2020-25593: Incorrect Default Permissions

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions...

CVE-2020-15496: Improper Preservation of Permissions

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions...

PT-2021-9798

Name of the Vulnerable Software and Affected Versions Acronis True Image for Mac versions prior to 2021 Update 4 Description The issue allows local privilege escalation due to insecure folder permissions. Recommendations For versions prior to 2021 Update 4, update to 2021 Update 4 or later to...

PT-2021-11162

Name of the Vulnerable Software and Affected Versions: Acronis True Image through 2021 on macOS Description: The issue allows local privilege escalation from admin to root due to insecure folder permissions. Recommendations: For Acronis True Image through 2021 on macOS, update to a version later...

MagicMotion Flamingo security vulnerability

MagicMotion Flamingo is a wearable vibrator from the Chinese company MagicMotion. The MagicMotion Flamingo 2 suffers from a security vulnerability that originates when the MagicMotion Flamingo 2 app for Android stores data on the sdcard under com.vt.magicmotion/files/Pictures. An attacker can...

Acronis True Image security vulnerabilities

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image suffers from a security vulnerability that stems from insecure folder...

Injector - Complete Arsenal Of Memory Injection And Other Techniques For Red-Teaming In Windows

Complete Arsenal of Memory injection and other techniques for red-teaming in Windows What does Injector do? Process injection support for shellcode located at remote server as well as local storage. Just specify the shellcode file and it will do the rest. It will by default inject into notepad.ex...

PT-2021-6144

Name of the Vulnerable Software and Affected Versions Acrobat Reader DC versions 2021.005.20054 and earlier Acrobat Reader DC versions 2020.004.30005 and earlier Acrobat Reader DC versions 2017.011.30197 and earlier Description The issue is related to an Uncontrolled Search Path Element...

CVE-2021-30117

The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injection in the parameter fldrId. Detailed description --- Given the following request: GET /InstallTab/exportFldr.asp?fldrId=1’ HTTP/1.1 Host: 192.168.1.194 User-Agent: Mozilla/5.0 Macintosh;...

WordPress Media File Organizer plugin directory traversal vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A directory traversal vulnerability exists in version 1.0.1 of the Media File Organizer plugin for...

MDT AutoSave information leakage vulnerability

MDT AutoSave is a software application. It provides an automated change management function. An information disclosure vulnerability exists in MDT AutoSave, which stems from the lack of security restrictions on the working directory, and allows an attacker to obtain information about a temporary...

CVE-2020-24143

Directory traversal in the Video Downloader for TikTok aka downloader-tiktok plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk-download-video parameter...