Hola VPN 1.79.859 Insecure Service Permissions

===== Tempest Security Intelligence - ADV-22/2018 === Hola VPN 1.79.859 - Insecure service permissions ------------------------------------------------------- Author: - Filipe Xavier Oliveira: ===== Table of Contents ===================================================== Overview Detailed...

Hola VPN Elevation of Privilege Vulnerability

Hola VPN is a VPN software that supports anonymous web browsing. An elevation of privilege vulnerability exists in Hola VPN version 1.34. A local attacker can exploit this vulnerability to gain privileges with the help of a malicious 7za.exe or hola.exe file...

CVE-2017-16757

Hola VPN 1.34 has weak permissions Everyone:F under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file...

Design/Logic Flaw

Hola VPN 1.34 has weak permissions Everyone:F under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file...

CVE-2017-16757

Hola VPN 1.34 has weak permissions Everyone:F under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file...

CVE-2017-16757

Hola VPN 1.34 has weak permissions Everyone:F under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file...

CVE-2017-16757

Hola VPN 1.34 is affected by a local privilege escalation due to weak permissions (Everyone:F) in %PROGRAMFILES%, enabling a local attacker to gain privileges via a malicious 7za.exe or hola.exe file. The CVE entry provides no exploit details in the connected documents; no remediation details are...

Hola VPN 1.34 Privilege Escalation Vulnerability

Hola VPN version 1.34 suffers from a privilege escalation vulnerability. Document Title: =============== Hola VPN v1.34 - Privilege Escalation Vulnerability Vulnerability Class: ==================== Privilege Escalation Product & Service Introduction: =============================== Hola's goal i...

Hola VPN 1.34 Privilege Escalation

Document Title: =============== Hola VPN v1.34 - Privilege Escalation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2062 Release Date: ============= 2017-05-03 Vulnerability Laboratory ID VL-ID: ==================================== 2062...

Hola VPN v1.34 - Privilege Escalation Vulnerability

Document Title: =============== Hola VPN v1.34 - Privilege Escalation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2062 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16757 CVE-ID: ======= CVE-2017-16757 Release Date:...

Hola VPN v1.34 - Privilege Escalation Vulnerability

Document Title: =============== Hola VPN v1.34 - Privilege Escalation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2062 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16757 CVE-ID: ======= CVE-2017-16757 Release Date:...

Hola Launcher - Simple, Fast - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Hola Launcher - Simple, Fast published at the 'play' market has multiple vulnerabilities...

Hola Free VPN Proxy - BSD license, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Hola Free VPN Proxy published at the 'play' market has multiple vulnerabilities...

Hola 2016 Hola Theme - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Hola 2016 Hola Theme published at the 'play' market has multiple vulnerabilities...

Luminous Hola Launcher Theme - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Luminous Hola Launcher Theme published at the 'play' market has multiple vulnerabilities...

Spaceship Hola 3D Theme - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Spaceship Hola 3D Theme published at the 'play' market has multiple vulnerabilities...

Researchers: Patch Incomplete for Hola VPN Vulnerabilities

Hola, a popular, free, peer-to-peer service that enables anonymous surfing and access to blocked online resources, said today it has patched vulnerabilities discovered last week that expose its millions of users to possible code execution, remote monitoring and other threats to privacy and...

Hola — A widely popular Free VPN service used as a Giant Botnet

The bandwidth of millions of users of a popular free VPN service is being sold without their knowledge in an attempt to cover the cost of its free service, which could result in a vast botnet-for-sale network. "Hola," a free virtual private network, is designed to help people abroad watch...

Virginity Security Advisory 2005-002 : Hola CMS - Another File destruction and System access

-------------------------------------------------------------------- Virginity Security Advisory 2005-002 - - - -------------------------------------------------------------------- DATE : 2005-03-13 15:11 GMT TYPE : remote VERSIONS AFFECTED : hola-cms-1.4.9-1 http://holacms.drunkencat.net/...

Virginity Security Advisory 2005-001 : Hola CMS - File destruction and System access

-------------------------------------------------------------------- Virginity Security Advisory 2005-001 - - - -------------------------------------------------------------------- DATE : 2005-03-12 15:45 GMT TYPE : remote VERSIONS AFFECTED : == hola-cms-1.4.9 http://holacms.drunkencat.net/...