Intel Authenticate Elevation of Privilege Vulnerability

Intel Authenticate is a set of multi-factor authentication software from the U.S. company Intel Intel. An elevation of privilege vulnerability exists in the software installer in versions prior to Intel Authenticate 3.8. A local attacker could exploit this vulnerability to gain elevation of...

The vulnerability of the Windows Store Installer component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Store Installer component of the Windows operating system is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2019-11166

Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-11166

The CVE-2019-11166 issue affects Intel® Easy Streaming Wizard prior to version 2.1.0731. The root cause is improper file permissions in the installer, which could let an authenticated local user escalate privileges. Multiple sources (Intel advisory and vendor/press records) corroborate a local es...

The vulnerability of the executable file FortiClientOnlineInstaller.exe of the Fortinet FortiClient for Windows security device allows a perpetrator to execute arbitrary code.

The vulnerability of the FortiClientOnlineInstaller.exe executable component of the Fortinet FortiClient for Windows security device is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to execute arbitrary code using a specially created DLL file...

CVE-2019-8076

Adobe application manager installer version 10.0 have an Insecure Library Loading DLL hijacking vulnerability. Successful exploitation could lead to Arbitrary Code Execution in the context of the current user...

CVE-2019-8076

The CVE-2019-8076 entry concerns Adobe Application Manager (AAM) installer version 10.0 with an Insecure Library Loading (DLL hijacking) vulnerability that could allow Arbitrary Code Execution in the current user context. Multiple sources corroborate that the flaw is located in the AAM installer ...

Microsoft Windows Store Installer Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege extraction vulnerability exists in the Microsoft Store installer, which can be...

CVE-2019-1270

An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link attack, aka 'Microsoft Windows Store Installer Elevation of Privilege Vulnerability'...

Adobe Fixes Critical Flash Player Code Execution Flaws

Adobe has issued patches for critical vulnerabilities in Flash Player which, if exploited, could lead to arbitrary code execution. Overall, as part of its September Security Bulletin, Adobe patched three vulnerabilities, including two critical-severity flaws in Flash Player and one “important”...

KB4516058: Windows 10 Version 1803 September 2019 Security Update

The remote Windows host is missing security update 4516058. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

KB4516044: Windows 10 Version 1607 and Windows Server 2016 September 2019 Security Update

The remote Windows host is missing security update 4516044. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

KB4516068: Windows 10 Version 1703 September 2019 Security Update

The remote Windows host is missing security update 4516068. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

BlackArch Linux v2019.09.01 - Penetration Testing Distribution

BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers. The repository contains 2336 tools. You can install tools individually or in groups. BlackArch Linux is compatible with existing Arch installs. ChangeLog: added more than 150 new tools added...

CVE-2019-11753

The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malware. If the Mozilla Maintenance Service is manipulated to update this unprotected location and the updated maintenance service in the...

September 3, 2019, update for Office 2016 (KB4475580)

None None...

Veeam Availability Orchestrator v2 Patch 1 (build 1463)

Challenge This patch fixes the following issue found in VAO 2.0. The presence of backup job objects created by Veeam plug-in backup jobs cause VAO Restore Plans to fail locating valid restore points required for the restore process. The following example shows the issue found in the Readiness Che...

CVE-2019-11148

Improper permissions in the installer for IntelR Remote Displays SDK before version 2.0.1 R2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11143

Improper permissions in the software installer for IntelR Authenticate before 3.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for IntelR Remote Displays SDK before version 2.0.1 R2 may allow an authenticated user to potentially enable escalation of privilege via local access...