PT-2018-13948

Name of the Vulnerable Software and Affected Versions Snap Creek Duplicator versions prior to 1.2.42 Description An issue allows an attacker to inject PHP code into wp-config.php during the database setup step, achieving arbitrary code execution by accessing leftover installer files, specifically...

Intel Extreme Tuning Utility Installer Buffer Overflow Vulnerability (CNVD-2020-16618)

Intel Extreme Tuning Utility is a Windows-based performance tuning tool from Intel Corporation.Installer is its installer. A buffer overflow vulnerability exists in the Intel Extreme Tuning Utility Installer. An attacker could use this vulnerability to elevate privileges and execute code or...

Intel Data Center Migration Center Software software installer DLL injection vulnerability

Intel Data Center Migration Center Software is a set of data center migration software from Intel Corporation in the U.S. The software installer is its installer. A DLL injection vulnerability exists in the software installer in Intel Data Center Migration Center Software 3.1 and earlier versions...

Intel Extreme Tuning Utility installer buffer overflow vulnerability

Intel Extreme Tuning Utility is a Windows-based performance tuning tool from Intel Corporation.Installer is its installer. A buffer overflow vulnerability exists in the installer in Intel Extreme Tuning Utility versions prior to 6.4.1.21, which can be exploited by a local attacker to cause a deni...

Intel IoT Developers Kit installer DLL injection vulnerability

Intel IoT Developers Kit is an IoT development kit from Intel USA. installer is its installer. A DLL injection vulnerability exists in the installer in Intel IoT Developers Kit 4.0 and earlier versions, which can be exploited by a local attacker to elevate privileges...

Parrot Security 4.2.2 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Updated kernel and core packages Parrot 4.2 is powered by the latestLinux 4.18 debianized kernel with all the usual wireless patches. A new version of the Debian-Installer now powers our netinstall images and the standard Parrot images. Firmware packages were updated to add broader hardware...

CVE-2018-12163

A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local access...

CVE-2018-12160

DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access...

CVE-2018-12151

Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer overflow potentially leading to a denial of service via local access...

CVE-2018-12150

Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose information as administrator via local access...

CVE-2018-12160

DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access...

Buffer overflow

Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer overflow potentially leading to a denial of service via local access...

Privilege escalation

Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose information as administrator via local access...

CVE-2018-12150

Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose information as administrator via local access...

CVE-2018-12150

Intel® Extreme Tuning Utility (Intel XTU) : The connected Intel advisory documents confirm a vulnerability in the Installer component of Intel XTU prior to version 6.4.1.21 that may allow an authenticated user to escalate privileges and potentially execute code or disclose information as an admin...

CVE-2018-12160

DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access...

CVE-2018-12160

CVE-2018-12160 is a DLL injection vulnerability in Intel Data Center Migration Center Software installer (v3.1 and earlier). The issue allows an authenticated local user to execute code with default directory permissions due to improper installer permissions. Affected product/versions: Intel Data...

CVE-2018-12151

Intel XTU installer before 6.4.1.21 contains a buffer overflow that may be triggerable by an authenticated local user, potentially leading to a denial of service. The vulnerability is documented as CVE-2018-12151 and is acknowledged in Intel’s INTEL-SA-00162 advisory, which also notes affected pr...

Intel® Data Migration Software Improper Permissions Advisory

Summary: A potential security vulnerability in Intel® Data Migration Software may allow Escalation of Privilege. Intel is releasing Intel® Data Migration Software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2018-12160 Description: DLL injection vulnerability...

LuckyMouse signs malicious NDISProxy driver with certificate of Chinese IT company

What happened? Since March 2018 we have discovered several infections where a previously unknown Trojan was injected into the lsass.exe system process memory. These implants were injected by the digitally signed 32- and 64-bit network filtering driver NDISProxy. Interestingly, this driver is sign...