CVE-2018-4049

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of installed games to exploit this vulnerability and execute arbitrary code with elevat...

The installer of Microsoft Teams may insecurely load Dynamic Link Libraries

Overview The installer of Microsoft Teams contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Microsoft states that the root cause of this vulnerability is "Application Directory App Dir DLL planting", thus there is no plan to release a...

April 2, 2019, update for Office 2016 (KB4462116)

None None...

Gemalto Sentinel Protection Installer Detection (Windows SMB Login)

Detects the installed version of Gemalto Sentinel Protection Installer for Windows. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

PortSwigger Web Security: DLL Hijacking in Burp Suite Pro 2.0.19 Installer

I've found that the latest installer of Burp Suite Pro tries to load some DLLs from an unprotected folder. After providing it with admin privileges required to install it tries to load these DLLs: C:\Users\bortto\AppData\Local\Temp\e4jA5E5.tmpdir1553882416\jre\bin\WINMM.dll...

Commando VM — Turn Your Windows Computer Into A Hacking Machine

FireEye today released Commando VM , which according to the company, is a "first of its kind Windows-based security distribution for penetration testing and red teaming." When it comes to the best-operating systems for hackers, Kali Linux is always the first choice for penetration testers and...

Apple iCloud for Windows iCloud Installer Code Execution Vulnerability

Apple iCloud for Windows is an American Apple Apple cloud service based on the Windows platform, which supports storage of music, photos, apps, contacts, etc. iCloud Installer is one of the iCloud installer components. A security vulnerability exists in the Windows Installer component in versions...

Intel Rapid Storage Technology enterprise Intel Accelerated Storage Manager elevation of privilege vulnerability

Intel Rapid Storage Technology enterprise RSTe is a rapid storage technology from Intel, U.S. Intel Accelerated Storage Manager is one of the accelerated storage managers. A security vulnerability exists in the installer for Intel Accelerated Storage Manager in Intel RSTe 5.5 and earlier versions...

CVE-2019-0135

Improper permissions in the installer for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206...

CVE-2019-0135

Improper permissions in the installer for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206...

Input validation

Improper permissions in the installer for IntelR Accelerated Storage Manager in IntelR RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206...

CVE-2019-5922

Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-5922

The CVE-2019-5922 issue affects the installer of Microsoft Teams, where an unsafe DLL search path (App Dir DLL planting) could allow arbitrary code to run with the caller’s privileges. Affected product: the Teams installer (prior to version 1.3.00.362). Root cause: insecure loading of Dynamic Lin...

Pirate matryoshka

The use of torrent trackers to spread malware is a well-known practice; cybercriminals disguise it as popular software, computer games, media files, and other sought-after content. We detected one such campaign early this year, when The Pirate Bay TPB tracker filled up with harmful files used to...

March 5, 2019, update for Office 2016 (KB4032231)

None None...

Intel OpenVINO for Linux Installer Information Disclosure Vulnerability

Intel OpenVINO for Linux is an open visual inference and neural network optimization toolkit for Linux-based platforms from Intel USA. A security vulnerability exists in the installer in IntelR OpenVINOTM 2018 R3 and earlier versions for Linux-based platforms, which stems from a logic error in th...

Intel USB 3.0 eXtensible Host Controller Driver Local Code Injection Vulnerability

Intel USB 3.0 eXtensible Host Controller Driver for Microsoft Windows 7 is a USB Universal Serial Bus 3.0 eXtensible Host Controller Driver for the Windows 7 platform from Intel Corporation. Host Controller Driver for Microsoft Windows 7. A code injection vulnerability exists in the installer in...

The vulnerability of the SwCTBWrapper function:: Read in the LibreOffice office software package allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SwCTBWrapper function in the LibreOffice office software package’s installer is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using a specially crafted file...

GHSA-87G3-X896-W798 Downloads Resources over HTTP in atom-node-module-installer

Affected versions of atom-node-module-installer insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...