Lucene search
+L

1 matches found

Exploit DB
Exploit DB
added 2015/11/16 12:0 a.m.47 views

Kaspersky AntiVirus - Certificate Handling Directory Traversal

Source: https://code.google.com/p/google-security-research/issues/detail?id=539 When Kaspersky https inspection is enabled, temporary certificates are created in %PROGRAMDATA% for validation. I observed that the naming pattern is CN.cer. I created a certificate with CN="../../../../Users/All...

5.3AI score
SaveExploits0
Rows per page
Query Builder